cybernews

fuite de donnée enregistrée

Latest News

CVE-2025-49008 - Atheos Command Injection Vulnerability

CVE ID : CVE-2025-49008
Published : June 5, 2025, 1:15 a.m. | 1 hour, 13 minutes ago
Description : Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/codegit/traits/execute.php` allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable versions are at risk of data breaches or server compromise. Version 6.0.4 introduces a `Common::safe_execute` function that sanitizes all arguments using `escapeshellarg()` prior to execution and migrated all components potentially vulnerable to similar exploits to use this new templated execution system.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 01:15:00 GMT

CVE-2025-5624 - "D-Link DIR-816 Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-5624
Published : June 5, 2025, 1:15 a.m. | 1 hour, 13 minutes ago
Description : A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /goform/QoSPortSetup. The manipulation of the argument port0_group/port0_remarker/ssid0_group/ssid0_remarker leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 01:15:00 GMT

CVE-2025-5625 - Campcodes Online Teacher Record Management System SQL Injection Vulnerability

CVE ID : CVE-2025-5625
Published : June 5, 2025, 1:15 a.m. | 1 hour, 13 minutes ago
Description : A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-teacher.php. The manipulation of the argument searchteacher leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 01:15:00 GMT

CVE-2025-5626 - Campcodes Online Teacher Record Management System SQL Injection

CVE ID : CVE-2025-5626
Published : June 5, 2025, 1:15 a.m. | 1 hour, 13 minutes ago
Description : A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/edit-subjects-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 01:15:00 GMT

CVE-2025-5627 - "Code-projects Patient Record Management System SQL Injection Vulnerability"

CVE ID : CVE-2025-5627
Published : June 5, 2025, 1:15 a.m. | 1 hour, 13 minutes ago
Description : A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 01:15:00 GMT

Cybermois 2025

Le Mois européen de la cybersécurité est une initiative européenne (ENISA)
qui vise à sensibiliser aux cybermenaces et aux bons réflexes pour s’en protéger.
En France, il est piloté par Cybermalveillance.gouv.fr

Thu, 05 Jun 2025 01:11:00 GMT

« Histoire de Cyber » : engagez-vous pour le Cybermois 2025

Et si vous deveniez acteur du Cybermois 2025 ? Nous vous invitons à vous engager et à prendre part à une action citoyenne en relayant la campagne de sensibilisation « Histoire de Cyber » tout au long du mois d’octobre. Rejoignez la mobilisation nationale : inscrivez-vous dès maintenant…

Thu, 05 Jun 2025 01:09:00 GMT

Cybermois 2025 : kit de communication

Vous souhaitez communiquer sur le Cybermois 2025 auprès de vos publics, éditer les supports du Cybermois à vos couleurs ou réutiliser des contenus de sensibilisation ? Nous vous mettons à disposition différents outils incluant.

Thu, 05 Jun 2025 01:05:00 GMT

CVE-2025-5620 - D-Link DIR-816 OS Command Injection Vulnerability

CVE ID : CVE-2025-5620
Published : June 5, 2025, 12:15 a.m. | 2 hours, 12 minutes ago
Description : A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file /goform/setipsec_config. The manipulation of the argument localIP/remoteIP leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 00:15:00 GMT

CVE-2025-5621 - D-Link DIR-816 OS Command Injection Vulnerability

CVE ID : CVE-2025-5621
Published : June 5, 2025, 12:15 a.m. | 2 hours, 12 minutes ago
Description : A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 00:15:00 GMT

CVE-2025-5622 - D-Link DIR-816 Wireless Stack-Based Buffer Overflow

CVE ID : CVE-2025-5622
Published : June 5, 2025, 12:15 a.m. | 2 hours, 12 minutes ago
Description : A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/wirelessApcli_5g. The manipulation of the argument apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 00:15:00 GMT

CVE-2025-5623 - D-Link DIR-816 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-5623
Published : June 5, 2025, 12:15 a.m. | 2 hours, 12 minutes ago
Description : A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 05 Jun 2025 00:15:00 GMT

CVE-2025-49007 - Apache Rack Denial of Service Vulnerability

CVE ID : CVE-2025-49007
Published : June 4, 2025, 11:15 p.m. | 3 hours, 13 minutes ago
Description : Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can cause Content-Disposition header parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. This header is used typically used in multipart parsing. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted. Version 3.1.16 contains a patch for the vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 23:15:00 GMT

CVE-2025-5616 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5616
Published : June 4, 2025, 11:15 p.m. | 3 hours, 13 minutes ago
Description : A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 23:15:00 GMT

CVE-2025-5617 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5617
Published : June 4, 2025, 11:15 p.m. | 3 hours, 13 minutes ago
Description : A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 23:15:00 GMT

CVE-2025-5618 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5618
Published : June 4, 2025, 11:15 p.m. | 3 hours, 13 minutes ago
Description : A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 23:15:00 GMT

CVE-2025-5619 - Tenda CH22 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-5619
Published : June 4, 2025, 11:15 p.m. | 3 hours, 13 minutes ago
Description : A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 23:15:00 GMT

CVE-2025-5613 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5613
Published : June 4, 2025, 10:15 p.m. | 4 hours, 12 minutes ago
Description : A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /request-details.php. The manipulation of the argument requestid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 22:15:00 GMT

CVE-2025-5614 - PHPGurukul Online Fire Reporting System SQL Injection

CVE ID : CVE-2025-5614
Published : June 4, 2025, 10:15 p.m. | 4 hours, 12 minutes ago
Description : A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 22:15:00 GMT

CVE-2025-5615 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5615
Published : June 4, 2025, 10:15 p.m. | 4 hours, 12 minutes ago
Description : A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /details.php. The manipulation of the argument requestid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 22:15:00 GMT

CVE-2025-5690 - PostgreSQL Anonymizer Mask Data Read Bypass

CVE ID : CVE-2025-5690
Published : June 4, 2025, 10:15 p.m. | 4 hours, 12 minutes ago
Description : PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg_dump. This problem occurs only when dynamic masking is enabled, which is not the default setting. The problem is resolved in version 2.2.1
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 22:15:00 GMT

CVE-2025-46341 - FreshRSS HTTP Auth Header Impersonation Vulnerability

CVE ID : CVE-2025-46341
Published : June 4, 2025, 9:15 p.m. | 5 hours, 12 minutes ago
Description : FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse proxy, it's possible to impersonate any user either via the `Remote-User` header or the `X-WebAuth-User` header by making specially crafted requests via the add feed functionality and obtaining the CSRF token via XPath scraping. The attacker has to know the IP address of the proxied FreshRSS instance and the admin's username, while also having an account on the instance. An attacker can send specially crafted requests in order to gain unauthorized access to internal services. This can also lead to privilege escalation like in the demonstrated scenario, although users that have setup OIDC are not affected by privilege escalation. Version 1.26.2 contains a patch for the issue.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 21:15:00 GMT

CVE-2025-48947 - Auth0 Next.js SDK Cache-Control Header Missing Vulnerability

CVE ID : CVE-2025-48947
Published : June 4, 2025, 9:15 p.m. | 5 hours, 12 minutes ago
Description : The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, `__session` cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three preconditions must be met in order for someone to be affected by the vulnerability: Applications using the NextJS-Auth0 SDK, versions between 4.0.1 to 4.6.0, applications using CDN or edge caching that caches responses with the Set-Cookie header, and if the Cache-Control header is not properly set for sensitive responses. Users should upgrade auth0/nextjs-auth0 to v4.6.1 to receive a patch.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 21:15:00 GMT

CVE-2025-5610 - CodeAstro Real Estate Management System SQL Injection Vulnerability

CVE ID : CVE-2025-5610
Published : June 4, 2025, 9:15 p.m. | 5 hours, 12 minutes ago
Description : A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 21:15:00 GMT

CVE-2025-5611 - CodeAstro Real Estate Management System SQL Injection Vulnerability

CVE ID : CVE-2025-5611
Published : June 4, 2025, 9:15 p.m. | 5 hours, 12 minutes ago
Description : A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affects an unknown part of the file /submitpropertyupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 21:15:00 GMT

CVE-2025-5612 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability

CVE ID : CVE-2025-5612
Published : June 4, 2025, 9:15 p.m. | 5 hours, 12 minutes ago
Description : A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 21:15:00 GMT

CVE-2025-5608 - Tenda AC18 Buffer Overflow Vulnerability

CVE ID : CVE-2025-5608
Published : June 4, 2025, 8:15 p.m. | 6 hours, 12 minutes ago
Description : A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 20:15:00 GMT

CVE-2025-5609 - Tenda AC18 Buffer Overflow Vulnerability

CVE ID : CVE-2025-5609
Published : June 4, 2025, 8:15 p.m. | 6 hours, 12 minutes ago
Description : A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 04 Jun 2025 20:15:00 GMT

CVE-2025-32015 - FreshRSS Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-32015
Published : June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago
Description : FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `` attribute, which leads to cross-site scripting (XSS) by loading an attacker's UserJS inside `<script src>`. In order to execute the attack, the attacker needs to control one of the victim's feeds and have an account on the FreshRSS instance that the victim is using. An attacker can gain access to the victim's account by exploiting this vulnerability. If the victim is an admin it would be possible to delete all users (cause damage) or execute arbitrary code on the server by modifying the update URL using fetch() via the XSS. Version 1.26.2 contains a patch for the issue. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32015"> read more </a> </article> <hr> <article> <h3> CVE-2025-46011 - Listmonk SQL Injection Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-46011 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>Listmonk v2.4.0 through v4.1.0 is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46011"> read more </a> </article> <hr> <article> <h3> CVE-2025-46203 - Apache Unifiedtransform Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46203 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46203"> read more </a> </article> <hr> <article> <h3> CVE-2025-46204 - Apache Unifiedtransform Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46204 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46204"> read more </a> </article> <hr> <article> <h3> CVE-2025-46339 - FreshRSS Favicon Poisoning Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46339 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to poison feed favicons by adding a given URL as a feed with the proxy set to an attacker-controlled one and disabled SSL verifying. The favicon hash is computed by hashing the feed URL and the salt, whilst not including the following variables: proxy address, proxy protocol, and whether SSL should be verified. Therefore it's possible to poison a favicon of a given feed by simply intercepting the response of the feed, and changing the website URL to one where a threat actor controls the feed favicon. Feed favicons can be replaced for all users by anyone. Version 1.26.2 fixes the issue. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46339"> read more </a> </article> <hr> <article> <h3> CVE-2025-48888 - Deno Deny-Read Allow-Read Permission Confusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-48888 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, `deno run --allow-read --deny-read main.ts` results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions given as `--allow-* --deny-*`. This only affects a nonsensical combination of flags, so there shouldn't be a real impact on the userbase. Users may upgrade to version 2.1.13, 2.2.13, or 2.3.2 to receive a patch. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48888"> read more </a> </article> <hr> <article> <h3> CVE-2025-48934 - Deno Deny Env Variable Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48934 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to versions 2.1.13 and 2.2.13, the `Deno.env.toObject` method ignores any variables listed in the `--deny-env` option of the `deno run` command. When looking at the documentation of the `--deny-env` option this might lead to a false impression that variables listed in the option are impossible to read. Software relying on the combination of both flags to allow access to most environment variables except a few sensitive ones will be vulnerable to malicious code trying to steal secrets using the `Deno.env.toObject()` method. Versions 2.1.13 and 2.2.13 contains a patch. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48934"> read more </a> </article> <hr> <article> <h3> CVE-2025-48935 - Deno SQLite Database Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48935 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is possible to bypass Deno's permission read/write db permission check by using `ATTACH DATABASE` statement. Version 2.2.5 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48935"> read more </a> </article> <hr> <article> <h3> CVE-2025-5607 - "Tenda AC18 PPTP User List Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5607 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5607"> read more </a> </article> <hr> <article> <h3> CVE-2025-22244 - VMware NSX Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22244 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation. <br> <strong>Severity:</strong> 6.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22244"> read more </a> </article> <hr> <article> <h3> CVE-2025-22245 - VMware NSX Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22245 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22245"> read more </a> </article> <hr> <article> <h3> CVE-2025-31134 - FreshRSS Path Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31134 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, an attacker can gain additional information about the server by checking if certain directories exist. An attacker can, for example, check if older PHP versions are installed or if certain software is installed on the server and potentially use that information to further attack the server. Version 1.26.2 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31134"> read more </a> </article> <hr> <article> <h3> CVE-2025-31136 - FreshRSS Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31136 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the feeds page. This occurs by combining a cross-site scripting (XSS) issue that occurs in `f.php` when SVG favicons are downloaded from an attacker-controlled feed containing `<script>` tags inside of them that aren't sanitized, with the lack of CSP in `f.php` by embedding the malicious favicon in an iframe (that has `sandbox="allow-scripts allow-same-origin"` set as its attribute). An attacker needs to control one of the feeds that the victim is subscribed to, and also must have an account on the FreshRSS instance. Other than that, the iframe payload can be embedded as one of two options. The first payload requires user interaction (the user clicking on the malicious feed entry) with default user configuration, and the second payload fires instantly right after the user adds the feed or logs into the account while the feed entry is still visible. This is because of lazy image loading functionality, which the second payload bypasses. An attacker can gain access to the victim's account by exploiting this vulnerability. If the victim is an admin it would be possible to delete all users (cause damage) or execute arbitrary code on the server by modifying the update URL using fetch() via the XSS. Version 1.26.2 has a patch for the issue. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31136"> read more </a> </article> <hr> <article> <h3> CVE-2025-31482 - FreshRSS Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31482 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31482"> read more </a> </article> <hr> <article> <h3> CVE-2025-22243 - VMware NSX Manager UI Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22243 <br> <strong>Published : </strong> June 4, 2025, 8:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22243"> read more </a> </article> <hr> <article> <h3> CVE-2025-5604 - Campcodes Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5604 <br> <strong>Published : </strong> June 4, 2025, 7:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5604"> read more </a> </article> <hr> <article> <h3> CVE-2025-5606 - Tenda AC18 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5606 <br> <strong>Published : </strong> June 4, 2025, 7:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5606"> read more </a> </article> <hr> <article> <h3> CVE-2025-5603 - Campcodes Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5603 <br> <strong>Published : </strong> June 4, 2025, 6:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument full_name/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5603"> read more </a> </article> <hr> <article> <h3> CVE-2025-5599 - PHPGurukul Student Result Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5599 <br> <strong>Published : </strong> June 4, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5599"> read more </a> </article> <hr> <article> <h3> CVE-2025-5600 - TOTOLINK EX1200T Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5600 <br> <strong>Published : </strong> June 4, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5600"> read more </a> </article> <hr> <article> <h3> CVE-2025-5602 - Campcodes Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5602 <br> <strong>Published : </strong> June 4, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument full_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5602"> read more </a> </article> <hr> <article> <h3> CVE-2025-5596 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5596 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component REGET Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5596"> read more </a> </article> <hr> <article> <h3> CVE-2025-5688 - Microsoft Windows DNS Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5688 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5688"> read more </a> </article> <hr> <article> <h3> CVE-2025-20129 - Cisco Customer Collaboration Platform (CCP) HTTP Request Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20129 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent to the web-based chat interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the chat interface of a targeted user on a vulnerable server. A successful exploit could allow the attacker to redirect chat traffic to a server that is under their control, resulting in sensitive information being redirected to the attacker. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20129"> read more </a> </article> <hr> <article> <h3> CVE-2025-20130 - "Cisco ISE File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20130 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. An attacker could exploit this vulnerability by sending a crafted file upload request to a specific API endpoint. A successful exploit could allow the attacker to upload arbitrary files to an affected system. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20130"> read more </a> </article> <hr> <article> <h3> CVE-2025-20163 - Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Impersonation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20163 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to impersonate Cisco NDFC-managed devices. This vulnerability is due to insufficient SSH host key validation. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections to Cisco NDFC-managed devices, which could allow an attacker to intercept this traffic. A successful exploit could allow the attacker to impersonate a managed device and capture user credentials. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20163"> read more </a> </article> <hr> <article> <h3> CVE-2025-20259 - Cisco ThousandEyes Endpoint Agent for Windows Symbolic Link File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20259 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authenticated, local attacker to delete arbitrary files on an affected device. These vulnerabilities are due to improper access controls on files that are in the local file system. An attacker could exploit these vulnerabilities by using a symbolic link to perform an agent upgrade that redirects the delete operation of any protected file. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20259"> read more </a> </article> <hr> <article> <h3> CVE-2025-20261 - Cisco IMC SSH Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20261 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due to insufficient restrictions on access to internal services. An attacker with a valid user account could exploit this vulnerability by using crafted syntax when connecting to the Cisco IMC of an affected device through SSH. A successful exploit could allow the attacker to access internal services with elevated privileges, which may allow unauthorized modifications to the system, including the possibility of creating new administrator accounts on the affected device. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20261"> read more </a> </article> <hr> <article> <h3> CVE-2025-20273 - Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20273 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20273"> read more </a> </article> <hr> <article> <h3> CVE-2025-20275 - Cisco Unified Contact Center Express Java Deserialization Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20275 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device.  This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this vulnerability by persuading an authenticated, local user to open a crafted .aef file. A successful exploit could allow the attacker to execute arbitrary code on the host that is running the editor application with the privileges of the user who launched it. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20275"> read more </a> </article> <hr> <article> <h3> CVE-2025-20276 - "Cisco Unified CCX Java Deserialization Remote Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20276 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.  This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this vulnerability by sending a crafted Java object to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of an affected device as a low-privilege user. A successful exploit could also allow the attacker to undertake further actions to elevate their privileges to root. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20276"> read more </a> </article> <hr> <article> <h3> CVE-2025-20277 - Cisco Unified CCX Path Traversal Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-20277 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper limitation of a pathname to a restricted directory (path traversal). An attacker could exploit this vulnerability by sending a crafted web request to an affected device, followed by a specific command through an SSH session. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of an affected device as a low-privilege user. A successful exploit could also allow the attacker to undertake further actions to elevate their privileges to root. <br> <strong>Severity:</strong> 3.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20277"> read more </a> </article> <hr> <article> <h3> CVE-2025-20278 - "Cisco Unified Communications Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20278 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied command arguments. An attacker could exploit this vulnerability by executing crafted commands on the CLI of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20278"> read more </a> </article> <hr> <article> <h3> CVE-2025-20279 - Cisco Unified CCX Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20279 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to conduct a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper sanitization of user input to the web-based management interface. An attacker could exploit this vulnerability by submitting a malicious script through the interface. A successful exploit could allow the attacker to conduct a stored XSS attack on the affected system. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20279"> read more </a> </article> <hr> <article> <h3> CVE-2025-20286 - "Cisco ISE Cloud Credential Exposure Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20286 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems. This vulnerability exists because credentials are improperly generated when Cisco ISE is being deployed on cloud platforms, resulting in different Cisco ISE deployments sharing the same credentials. These credentials are shared across multiple Cisco ISE deployments as long as the software release and cloud platform are the same. An attacker could exploit this vulnerability by extracting the user credentials from Cisco ISE that is deployed in the cloud and then using them to access Cisco ISE that is deployed in other cloud environments through unsecured ports. A successful exploit could allow the attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems. Note: If the Primary Administration node is deployed in the cloud, then Cisco ISE is affected by this vulnerability. If the Primary Administration node is on-premises, then it is not affected. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20286"> read more </a> </article> <hr> <article> <h3> CVE-2025-2336 - AngularJS SVG Image Content Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2336 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects AngularJS versions greater than or equal to 1.3.1. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2336"> read more </a> </article> <hr> <article> <h3> CVE-2025-5595 - FreeFloat FTP Server Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5595 <br> <strong>Published : </strong> June 4, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component PROGRESS Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5595"> read more </a> </article> <hr> <article> <h3> CVE-2025-29094 - Motivian Content Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29094 <br> <strong>Published : </strong> June 4, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29094"> read more </a> </article> <hr> <article> <h3> CVE-2025-5593 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5593 <br> <strong>Published : </strong> June 4, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component HOST Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5593"> read more </a> </article> <hr> <article> <h3> CVE-2025-5594 - FreeFloat FTP Server SET Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5594 <br> <strong>Published : </strong> June 4, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component SET Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5594"> read more </a> </article> <hr> <article> <h3> CVE-2025-23106 - Samsung Mobile Processor Exynos Use-After-Free Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23106 <br> <strong>Published : </strong> June 4, 2025, 4:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23106"> read more </a> </article> <hr> <article> <h3> CVE-2025-29093 - Motivian Content Mangment System Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29093 <br> <strong>Published : </strong> June 4, 2025, 4:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29093"> read more </a> </article> <hr> <article> <h3> CVE-2025-23095 - Samsung Mobile Processor Exynos Double Free Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23095 <br> <strong>Published : </strong> June 4, 2025, 3:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23095"> read more </a> </article> <hr> <article> <h3> CVE-2025-23096 - Samsung Exynos Double Free Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-23096 <br> <strong>Published : </strong> June 4, 2025, 3:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23096"> read more </a> </article> <hr> <article> <h3> CVE-2025-23101 - Samsung Mobile Processor Exynos UAF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23101 <br> <strong>Published : </strong> June 4, 2025, 3:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23101"> read more </a> </article> <hr> <article> <h3> CVE-2025-5592 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5592 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component PASSIVE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5592"> read more </a> </article> <hr> <article> <h3> CVE-2025-1701 - MIM Admin Service Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1701 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by sending a specially crafted request over the RMI interface to execute arbitrary code with the privileges of the MIM Admin service. The RMI interface is only accessible locally (listening on 127.0.0.1), limiting the attack vector to the local machine. This means that in a properly configured hospital environment, an attacker must have already compromised the network and additionally compromised the system where the MIM Admin service is running. From there, attackers with sufficient knowledge of MIM's implementation, library usage, and functionality with access to extend the MIM RMI library could force the MIM Admin service to run commands on the local machine with its privileges. Users of MIM Software products exposed via RDP or multi-user application virtualization system should take note that the system being exposed is the environment hosting the virtualized MIM client. This issue affects MIM Admin Service: before 7.2.13, 7.3.8, 7.4.3 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1701"> read more </a> </article> <hr> <article> <h3> CVE-2025-27811 - Razer Synapse 4 Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-27811 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27811"> read more </a> </article> <hr> <article> <h3> CVE-2025-48960 - Acronis Cyber Protect TLS Server Key Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-48960 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48960"> read more </a> </article> <hr> <article> <h3> CVE-2025-48961 - Acronis Cyber Protect Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-48961 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48961"> read more </a> </article> <hr> <article> <h3> CVE-2025-48962 - Acronis Cyber Protect SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48962 <br> <strong>Published : </strong> June 4, 2025, 2:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48962"> read more </a> </article> <hr> <article> <h3> CVE-2025-30415 - Acronis Cyber Protect Cloud Agent Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30415 <br> <strong>Published : </strong> June 4, 2025, 12:15 p.m. | 5 hours, 13 minutes ago <br> <strong>Description : </strong>Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30415"> read more </a> </article> <hr> <article> <h3> CVE-2025-48959 - Acronis Cyber Protect Cloud Agent Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-48959 <br> <strong>Published : </strong> June 4, 2025, 12:15 p.m. | 5 hours, 13 minutes ago <br> <strong>Description : </strong>Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40077. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48959"> read more </a> </article> <hr> <article> <h3> CVE-2025-5597 - Airleader MASTER Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5597 <br> <strong>Published : </strong> June 4, 2025, 12:15 p.m. | 5 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5597"> read more </a> </article> <hr> <article> <h3> CVE-2025-5598 - WF Steuerungstechnik GmbH Airleader MASTER Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5598 <br> <strong>Published : </strong> June 4, 2025, 12:15 p.m. | 5 hours, 13 minutes ago <br> <strong>Description : </strong>Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5598"> read more </a> </article> <hr> <article> <h3> CVE-2025-5601 - Wireshark Column Handling Crash Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-5601 <br> <strong>Published : </strong> June 4, 2025, 11:15 a.m. | 6 hours, 13 minutes ago <br> <strong>Description : </strong>Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5601"> read more </a> </article> <hr> <article> <h3> CVE-2018-25112 - Siemens SIMATIC Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2018-25112 <br> <strong>Published : </strong> June 4, 2025, 10:15 a.m. | 7 hours, 13 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2018-25112"> read more </a> </article> <hr> <article> <h3> CVE-2025-5583 - CodeAstro Real Estate Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5583 <br> <strong>Published : </strong> June 4, 2025, 10:15 a.m. | 7 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5583"> read more </a> </article> <hr> <article> <h3> CVE-2025-5584 - PHPGurukul Hospital Management System Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5584 <br> <strong>Published : </strong> June 4, 2025, 10:15 a.m. | 7 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5584"> read more </a> </article> <hr> <article> <h3> CVE-2025-5580 - CodeAstro Real Estate Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5580 <br> <strong>Published : </strong> June 4, 2025, 9:15 a.m. | 8 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5580"> read more </a> </article> <hr> <article> <h3> CVE-2025-5581 - CodeAstro Real Estate Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5581 <br> <strong>Published : </strong> June 4, 2025, 9:15 a.m. | 8 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5581"> read more </a> </article> <hr> <article> <h3> CVE-2025-5582 - CodeAstro Real Estate Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5582 <br> <strong>Published : </strong> June 4, 2025, 9:15 a.m. | 8 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5582"> read more </a> </article> <hr> <article> <h3> CVE-2025-5482 - Sunshine Photo Cart WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5482 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords through the password reset functionality, including administrators, and leverage that to reset the user's password and gain access to their account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5482"> read more </a> </article> <hr> <article> <h3> CVE-2025-5576 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5576 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5576"> read more </a> </article> <hr> <article> <h3> CVE-2025-5577 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5577 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5577"> read more </a> </article> <hr> <article> <h3> CVE-2025-5578 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5578 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5578"> read more </a> </article> <hr> <article> <h3> CVE-2025-5579 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5579 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5579"> read more </a> </article> <hr> <article> <h3> CVE-2025-47726 - Delta Electronics CNCSoft Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47726 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47726"> read more </a> </article> <hr> <article> <h3> CVE-2025-47727 - Delta Electronics CNCSoft File Path Traversal Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47727 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47727"> read more </a> </article> <hr> <article> <h3> CVE-2025-47728 - Delta Electronics CNCSoft-G2 Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47728 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47728"> read more </a> </article> <hr> <article> <h3> CVE-2024-13967 - EIBPORT Web Server Configuration Page Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-13967 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>This vulnerability allows the successful attacker to gain unauthorized access to a configuration web page delivered by the integrated web Server of EIBPORT. This issue affects EIBPORT V3 KNX: through 3.9.8; EIBPORT V3 KNX GSM: through 3.9.8. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13967"> read more </a> </article> <hr> <article> <h3> CVE-2025-27444 - RSform!Pro Joomla Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-27444 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allows an authenticated attacker with admin or editor privileges to inject arbitrary JavaScript code by crafting a malicious URL. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27444"> read more </a> </article> <hr> <article> <h3> CVE-2025-47724 - Delta Electronics CNCSoft RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-47724 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47724"> read more </a> </article> <hr> <article> <h3> CVE-2025-47725 - Delta Electronics CNCSoft Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47725 <br> <strong>Published : </strong> June 4, 2025, 8:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47725"> read more </a> </article> <hr> <article> <h3> CVE-2025-5574 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5574 <br> <strong>Published : </strong> June 4, 2025, 7:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file /add-company.php. The manipulation of the argument companyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5574"> read more </a> </article> <hr> <article> <h3> CVE-2025-5575 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5575 <br> <strong>Published : </strong> June 4, 2025, 7:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file /add-product.php. The manipulation of the argument productname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5575"> read more </a> </article> <hr> <article> <h3> CVE-2025-5569 - IdeaCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5569 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods of the file /api/v1.index.article/getList.html. The manipulation of the argument Field leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.8 is able to address this issue. The patch is named 935aceb4c21338633de6d41e13332f7b9db4fa6a. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5569"> read more </a> </article> <hr> <article> <h3> CVE-2025-5571 - D-Link DCS-932L OS Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5571 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5571"> read more </a> </article> <hr> <article> <h3> CVE-2025-5572 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5572 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5572"> read more </a> </article> <hr> <article> <h3> CVE-2025-5573 - D-Link DCS-932L OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5573 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5573"> read more </a> </article> <hr> <article> <h3> CVE-2025-4580 - WordPress File Provider CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4580 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4580"> read more </a> </article> <hr> <article> <h3> CVE-2025-48710 - Kro Kube Resource Orchestrator Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48710 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>kro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefinition resources) to supply arbitrary container images. This can lead to a confused-deputy scenario where kro's controllers deploy and run attacker-controlled images, resulting in unauthenticated remote code execution on cluster nodes. <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48710"> read more </a> </article> <hr> <article> <h3> CVE-2025-4578 - WordPress File Provider SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4578 <br> <strong>Published : </strong> June 4, 2025, 6:15 a.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4578"> read more </a> </article> <hr> <article> <h3> CVE-2025-5566 - PHPGurukul Notice Board System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5566 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 4 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown part of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5566"> read more </a> </article> <hr> <article> <h3> CVE-2025-5539 - WordPress WP Easy Contact Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5539 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5539"> read more </a> </article> <hr> <article> <h3> CVE-2025-5561 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5561 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5561"> read more </a> </article> <hr> <article> <h3> CVE-2025-5562 - PHPGurukul Curfew SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5562 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5562"> read more </a> </article> <hr> <article> <h3> CVE-2024-31127 - Zscaler Client Connector Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-31127 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their privileges. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-31127"> read more </a> </article> <hr> <article> <h3> CVE-2025-20981 - Google AudioService Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20981 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20981"> read more </a> </article> <hr> <article> <h3> CVE-2025-20984 - Samsung Cloud for Galaxy Watch Default Permission Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20984 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20984"> read more </a> </article> <hr> <article> <h3> CVE-2025-20985 - Microsoft Xbox ThemeManager Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20985 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20985"> read more </a> </article> <hr> <article> <h3> CVE-2025-20986 - Samsung Galaxy Watch Screen Capture Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20986 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20986"> read more </a> </article> <hr> <article> <h3> CVE-2025-20987 - Samsung Galaxy Fingerprint Vulnerability - Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-20987 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token. <br> <strong>Severity:</strong> 5.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20987"> read more </a> </article> <hr> <article> <h3> CVE-2025-20988 - Qualcomm Fingerprint Trustlet OOB Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20988 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20988"> read more </a> </article> <hr> <article> <h3> CVE-2025-20989 - Fingerprint Trustlet Log Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20989 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key. <br> <strong>Severity:</strong> 5.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20989"> read more </a> </article> <hr> <article> <h3> CVE-2025-20991 - Android Bluetooth Improper Export of Components Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20991 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20991"> read more </a> </article> <hr> <article> <h3> CVE-2025-20992 - Samsung Camera Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20992 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20992"> read more </a> </article> <hr> <article> <h3> CVE-2025-20993 - Samsung Camera libsecimaging Camera Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-20993 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20993"> read more </a> </article> <hr> <article> <h3> CVE-2025-20994 - Samsung Internet File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20994 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20994"> read more </a> </article> <hr> <article> <h3> CVE-2025-20995 - Samsung Internet File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20995 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20995"> read more </a> </article> <hr> <article> <h3> CVE-2025-20996 - Samsung Smart Switch Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-20996 <br> <strong>Published : </strong> June 4, 2025, 5:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20996"> read more </a> </article> <hr> <article> <h3> CVE-2025-5557 - PHPGurukul Teacher Subject Allocation Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5557 <br> <strong>Published : </strong> June 4, 2025, 4:16 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-course.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5557"> read more </a> </article> <hr> <article> <h3> CVE-2025-5558 - PHPGurukul Teacher Subject Allocation Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5558 <br> <strong>Published : </strong> June 4, 2025, 4:16 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5558"> read more </a> </article> <hr> <article> <h3> CVE-2025-5560 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5560 <br> <strong>Published : </strong> June 4, 2025, 4:16 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5560"> read more </a> </article> <hr> <article> <h3> CVE-2025-5531 - WordPress Employee Directory - Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5531 <br> <strong>Published : </strong> June 4, 2025, 4:15 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5531"> read more </a> </article> <hr> <article> <h3> CVE-2025-5532 - WordPress Campus Directory Plugin Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5532 <br> <strong>Published : </strong> June 4, 2025, 4:15 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5532"> read more </a> </article> <hr> <article> <h3> CVE-2025-5556 - PHPGurukul Teacher Subject Allocation Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5556 <br> <strong>Published : </strong> June 4, 2025, 4:15 a.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System 1.0. This affects an unknown part of the file /admin/edit-teacher-info.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5556"> read more </a> </article> <hr> <article> <h3> CVE-2025-5554 - PHPGurukul Rail Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5554 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5554"> read more </a> </article> <hr> <article> <h3> CVE-2025-49202 - Apache HTTP Server Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49202 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49202"> read more </a> </article> <hr> <article> <h3> CVE-2025-49203 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-49203 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49203"> read more </a> </article> <hr> <article> <h3> CVE-2025-49204 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-49204 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49204"> read more </a> </article> <hr> <article> <h3> CVE-2025-49205 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-49205 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49205"> read more </a> </article> <hr> <article> <h3> CVE-2025-49206 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-49206 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49206"> read more </a> </article> <hr> <article> <h3> CVE-2025-49207 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-49207 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49207"> read more </a> </article> <hr> <article> <h3> CVE-2025-49208 - Apache HTTP Server Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-49208 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49208"> read more </a> </article> <hr> <article> <h3> CVE-2025-49209 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-49209 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49209"> read more </a> </article> <hr> <article> <h3> CVE-2025-49210 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-49210 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49210"> read more </a> </article> <hr> <article> <h3> CVE-2025-49223 - Billboard.js Prototype Pollution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49223 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49223"> read more </a> </article> <hr> <article> <h3> CVE-2025-5552 - ChestnutCMS Groovy Deserialization Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5552 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in ChestnutCMS up to 15.1. It has been declared as critical. This vulnerability affects unknown code of the file /dev-api/groovy/exec of the component API Endpoint. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5552"> read more </a> </article> <hr> <article> <h3> CVE-2025-5553 - PHPGurukul Rail Pass Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5553 <br> <strong>Published : </strong> June 4, 2025, 3:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5553"> read more </a> </article> <hr> <article> <h3> CVE-2025-5551 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5551 <br> <strong>Published : </strong> June 4, 2025, 2:15 a.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. This affects an unknown part of the component SYSTEM Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5551"> read more </a> </article> <hr> <article> <h3> CVE-2025-5548 - FreeFloat FTP Server NOOP Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5548 <br> <strong>Published : </strong> June 4, 2025, 1:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5548"> read more </a> </article> <hr> <article> <h3> CVE-2025-5549 - FreeFloat FTP Server PASV Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5549 <br> <strong>Published : </strong> June 4, 2025, 1:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component PASV Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5549"> read more </a> </article> <hr> <article> <h3> CVE-2025-5550 - FreeFloat FTP Server PBSZ Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5550 <br> <strong>Published : </strong> June 4, 2025, 1:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component PBSZ Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5550"> read more </a> </article> <hr> <article> <h3> CVE-2025-5546 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5546 <br> <strong>Published : </strong> June 4, 2025, 12:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /expense-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5546"> read more </a> </article> <hr> <article> <h3> CVE-2025-5547 - FreeFloat FTP Server CDUP Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5547 <br> <strong>Published : </strong> June 4, 2025, 12:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component CDUP Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5547"> read more </a> </article> <hr> <article> <h3> CVE-2025-5545 - Aluoxiang OA System Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5545 <br> <strong>Published : </strong> June 4, 2025, 12:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. This affects the function image of the file src/main/java/cn/gson/oasys/controller/process/ProcedureController.java. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 04 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5545"> read more </a> </article> <hr> <article> <h3> CVE-2025-24015 - Deno AES-GCM Authentication Tag Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-24015 <br> <strong>Published : </strong> June 3, 2025, 11:15 p.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Versions 1.46.0 through 2.1.6 have an issue that affects AES-256-GCM and AES-128-GCM in Deno in which the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the guarantees expected from AES-GCM. Older versions of Deno correctly threw errors in such cases, as does Node.js. Without authentication tag verification, AES-GCM degrades to essentially CTR mode, removing integrity protection. Authenticated data set with set_aad is also affected, as it is incorporated into the GCM hash (ghash) but this too is not validated, rendering AAD checks ineffective. Version 2.1.7 includes a patch that addresses this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24015"> read more </a> </article> <hr> <article> <h3> CVE-2025-5543 - TOTOLINK X2000R Cross-Site Scripting Vulnerability in Parent Controls Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-5543 <br> <strong>Published : </strong> June 3, 2025, 11:15 p.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5543"> read more </a> </article> <hr> <article> <h3> CVE-2025-5544 - Aluoxiang OA System Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5544 <br> <strong>Published : </strong> June 3, 2025, 11:15 p.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. It has been rated as problematic. Affected by this issue is the function image of the file src/main/java/cn/gson/oasys/controller/user/UserpanelController.java. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5544"> read more </a> </article> <hr> <article> <h3> CVE-2025-5542 - TOTOLINK X2000R Cross-Site Scripting Vulnerability in Virtual Server Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-5542 <br> <strong>Published : </strong> June 3, 2025, 10:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5542"> read more </a> </article> <hr> <article> <h3> CVE-2025-5527 - Tenda RX3 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5527 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the function save_staticroute_data of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5527"> read more </a> </article> <hr> <article> <h3> CVE-2025-48951 - Auth0-PHP Insecure Cookie Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48951 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.14.0 contain a vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Applications using the Auth0-PHP SDK are affected, as are applications using the Auth0/symfony, Auth0/laravel-auth0, or Auth0/wordpress SDKs, because those SDKsrely on the Auth0-PHP SDK versions from 8.0.0-BETA3 until 8.14.0. Version 8.14.0 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48951"> read more </a> </article> <hr> <article> <h3> CVE-2025-48999 - DataEase SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48999 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, `getUrlType()` retrieves `hostName`. Since the judgment statement returns false, it will not enter the if statement and will not be filtered. The payload can be directly concatenated at the replace location to construct a malicious JDBC statement. Version 2.10.10 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48999"> read more </a> </article> <hr> <article> <h3> CVE-2025-49000 - InvenTree Label-Sheet Plugin Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49000 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in `label-sheet` plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a denial-of-service via memory exhaustion. the issue is fixed in versions 0.17.13 and higher. No workaround is available aside from upgrading to the patched version. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49000"> read more </a> </article> <hr> <article> <h3> CVE-2025-49001 - DataEase JWT Token Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49001 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49001"> read more </a> </article> <hr> <article> <h3> CVE-2025-49002 - DataEase Case Insensitive Patch Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49002 <br> <strong>Published : </strong> June 3, 2025, 9:15 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49002"> read more </a> </article> <hr> <article> <h3> CVE-2025-23097 - Samsung Mobile Processor Exynos 1380 Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23097 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23097"> read more </a> </article> <hr> <article> <h3> CVE-2025-23098 - Samsung Mobile Processor Exynos Use-After-Free Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-23098 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23098"> read more </a> </article> <hr> <article> <h3> CVE-2025-23100 - Samsung Exynos NULL Check Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23100 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The absence of a NULL check leads to a Denial of Service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23100"> read more </a> </article> <hr> <article> <h3> CVE-2025-35036 - Apache Hibernate Expression Language Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-35036 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35036"> read more </a> </article> <hr> <article> <h3> CVE-2025-5523 - Enilu Web-Flash Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5523 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in enilu web-flash 1.0. This affects the function fileService.upload of the file src/main/java/cn/enilu/flash/api/controller/FileController/upload of the component File Upload. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5523"> read more </a> </article> <hr> <article> <h3> CVE-2025-5525 - "Jrohy Trojan LogChan os Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5525 <br> <strong>Published : </strong> June 3, 2025, 8:15 p.m. | 6 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5525"> read more </a> </article> <hr> <article> <h3> CVE-2025-5521 - WuKongOpenSource WukongCRM Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5521 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in WuKongOpenSource WukongCRM 9.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/user/updataPassword. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5521"> read more </a> </article> <hr> <article> <h3> CVE-2025-5522 - Jack0240 魏 bskms 蓝天幼儿园管理系统 Unauthenticated Remote Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5522 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in jack0240 魏 bskms 蓝天幼儿园管理系统 up to dffe6640b5b54d8e29da6f060e0493fea74b3fad. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sa/addUser of the component User Creation Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5522"> read more </a> </article> <hr> <article> <h3> CVE-2025-48998 - DataEase Arbitrary File Deserialization </h3> <p> <strong>CVE ID : </strong>CVE-2025-48998 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.10. No known workarounds are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48998"> read more </a> </article> <hr> <article> <h3> CVE-2025-48950 - MaxKB Sandbox Directory Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48950 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>MaxKB is an open-source AI assistant for enterprise. Prior to version 1.10.8-lts, Sandbox only restricts the execution permissions of binary files in common directories, such as `/bin,/usr/bin`, etc. Therefore, attackers can exploit some files with execution permissions in non blacklisted directories to carry out attacks. Version 1.10.8-lts fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48950"> read more </a> </article> <hr> <article> <h3> CVE-2025-48953 - Umbraco File Upload Extension Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48953 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Umbraco is an ASP.NET content management system (CMS). Starting in version 14.0.0 and prior to versions 15.4.2 and 16.0.0, it's possible to upload a file that doesn't adhere with the configured allowable file extensions via a manipulated API request. The issue is patched in versions 15.4.2 and 16.0.0. No known workarounds are available. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48953"> read more </a> </article> <hr> <article> <h3> CVE-2025-48997 - Multer DoS Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48997 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to `2.0.1` to receive a patch. No known workarounds are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48997"> read more </a> </article> <hr> <article> <h3> CVE-2025-23102 - Samsung Exynos Double Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23102 <br> <strong>Published : </strong> June 3, 2025, 7:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, and 1380. A Double Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23102"> read more </a> </article> <hr> <article> <h3> CVE-2025-30360 - Webpack-dev-server Cross-site WebSocket Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30360 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when you access a malicious web site with non-Chromium based browser. The `Origin` header is checked to prevent Cross-site WebSocket hijacking from happening, which was reported by CVE-2018-14732. But webpack-dev-server always allows IP address `Origin` headers. This allows websites that are served on IP addresses to connect WebSocket. An attacker can obtain source code via a method similar to that used to exploit CVE-2018-14732. Version 5.2.1 contains a patch for the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30360"> read more </a> </article> <hr> <article> <h3> CVE-2025-5513 - Quequnlong Shiyi-Blog Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5513 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/api/comment/add. The manipulation of the argument content leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5513"> read more </a> </article> <hr> <article> <h3> CVE-2025-5515 - TOTOLINK X2000R Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5515 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel. The manipulation of the argument devicemac1 leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5515"> read more </a> </article> <hr> <article> <h3> CVE-2025-5516 - TOTOLINK X2000R Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5516 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5516"> read more </a> </article> <hr> <article> <h3> CVE-2025-5520 - Open5GS AMF/MME Reachable Assertion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5520 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmm_state_authentication/emm_state_authentication of the component AMF/MME. The manipulation leads to reachable assertion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 9f5d133657850e6167231527514ee1364d37a884. It is recommended to apply a patch to fix this issue. This is a different issue than CVE-2025-1893. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5520"> read more </a> </article> <hr> <article> <h3> CVE-2025-30359 - Webpack-dev-server Cross-Site Scripting (XSS) and Prototype Pollution </h3> <p> <strong>CVE ID : </strong>CVE-2025-30359 <br> <strong>Published : </strong> June 3, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by a script tag is not subject to same origin policy, an attacker can inject a malicious script in their site and run the script. Note that the attacker has to know the port and the output entrypoint script path. Combined with prototype pollution, the attacker can get a reference to the webpack runtime variables. By using `Function::toString` against the values in `__webpack_modules__`, the attacker can get the source code. Version 5.2.1 contains a patch for the issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30359"> read more </a> </article> <hr> <article> <h3> CVE-2025-23107 - Samsung Exynos Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23107 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23107"> read more </a> </article> <hr> <article> <h3> CVE-2025-30167 - Jupyter Core Unrestricted Configuration File Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30167 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user). <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30167"> read more </a> </article> <hr> <article> <h3> CVE-2025-32105 - Sangoma IMG2020 HTTP Server Remote Code Execution Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32105 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32105"> read more </a> </article> <hr> <article> <h3> CVE-2025-32106 - Audiocodes Mediapack Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32106 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability to execute unauthorized code. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32106"> read more </a> </article> <hr> <article> <h3> CVE-2025-5510 - Shiyi-Blog Remote Server-Side Request Forgery (SSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5510 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5510"> read more </a> </article> <hr> <article> <h3> CVE-2025-5511 - "Quequnlong Shiyi-Blog Remote Unauthorized File Access Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5511 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affects some unknown processing of the file /dev api/app/album/photos/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5511"> read more </a> </article> <hr> <article> <h3> CVE-2025-5512 - Quequnlong Shiyi-Blog Administrator Backend Improper Authentication Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5512 <br> <strong>Published : </strong> June 3, 2025, 5:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5512"> read more </a> </article> <hr> <article> <h3> CVE-2025-44148 - MailEnable Cross Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-44148 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44148"> read more </a> </article> <hr> <article> <h3> CVE-2025-45854 - "JEHC-BPM File Upload RCE" </h3> <p> <strong>CVE ID : </strong>CVE-2025-45854 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in the component /server/executeExec of JEHC-BPM v2.0.1 allows attackers to execute arbitrary code via uploading a crafted file. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45854"> read more </a> </article> <hr> <article> <h3> CVE-2025-5507 - TOTOLINK A3002RU Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5507 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5507"> read more </a> </article> <hr> <article> <h3> CVE-2025-5508 - TOTOLINK A3002RU Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5508 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5508"> read more </a> </article> <hr> <article> <h3> CVE-2025-5509 - Quequnlong Shiyi-Blog Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5509 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1. This affects an unknown part of the file /api/file/upload. The manipulation of the argument file/source leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5509"> read more </a> </article> <hr> <article> <h3> CVE-2025-1334 - IBM QRadar Suite Software Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1334 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1334"> read more </a> </article> <hr> <article> <h3> CVE-2025-23103 - Samsung Exynos Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23103 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23103"> read more </a> </article> <hr> <article> <h3> CVE-2025-25019 - IBM QRadar Suite Software Session Impersonation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25019 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25019"> read more </a> </article> <hr> <article> <h3> CVE-2025-25020 - IBM QRadar Suite Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25020 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly validating API data input. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25020"> read more </a> </article> <hr> <article> <h3> CVE-2025-25021 - IBM QRadar Suite Software Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25021 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25021"> read more </a> </article> <hr> <article> <h3> CVE-2025-25022 - IBM QRadar Suite Software Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25022 <br> <strong>Published : </strong> June 3, 2025, 4:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files. <br> <strong>Severity:</strong> 9.6 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25022"> read more </a> </article> <hr> <article> <h3> CVE-2025-5506 - TOTOLINK A3002RU Cross-Site Scripting in NAT Mapping Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-5506 <br> <strong>Published : </strong> June 3, 2025, 3:16 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT Mapping Page. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5506"> read more </a> </article> <hr> <article> <h3> CVE-2025-5503 - TOTOLINK X15 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5503 <br> <strong>Published : </strong> June 3, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5503"> read more </a> </article> <hr> <article> <h3> CVE-2025-5504 - TOTOLINK X2000R Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5504 <br> <strong>Published : </strong> June 3, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5504"> read more </a> </article> <hr> <article> <h3> CVE-2025-5505 - TOTOLINK A3002RU Cross-Site Scripting Vulnerability in Virtual Server Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-5505 <br> <strong>Published : </strong> June 3, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5505"> read more </a> </article> <hr> <article> <h3> CVE-2025-43924 - Unicom Focal Point Stored Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43924 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController (for /fp/admin/settings/loginpage) and the rootserviceurl parameter in FriendsController (for /fp/admin/settings/friends), entered by an admin, allow stored XSS. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43924"> read more </a> </article> <hr> <article> <h3> CVE-2025-43925 - Unicom Focal Point Data Encryption Key Hardcoded Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43925 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded key, making it easier to recover the cleartext data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43925"> read more </a> </article> <hr> <article> <h3> CVE-2025-46548 - Pekko Management Basic Authentication Misapplication </h3> <p> <strong>CVE ID : </strong>CVE-2025-46548 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied. Users that rely on authentication instead of making sure the Management API ports are only available to trusted users are recommended to upgrade to version 1.1.1, which fixes this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46548"> read more </a> </article> <hr> <article> <h3> CVE-2024-45655 - IBM Application Gateway Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45655 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45655"> read more </a> </article> <hr> <article> <h3> CVE-2025-36564 - Dell Encryption Improper Link Resolution Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36564 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36564"> read more </a> </article> <hr> <article> <h3> CVE-2025-43923 - Unicom Focal Point SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43923 <br> <strong>Published : </strong> June 3, 2025, 3:15 p.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Focal Point can perform SQL injection via the image parameter during a delete report image operation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43923"> read more </a> </article> <hr> <article> <h3> CVE-2025-45855 - Erupt Elevation of Privilege (Arbitrary Code Execution) </h3> <p> <strong>CVE ID : </strong>CVE-2025-45855 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45855"> read more </a> </article> <hr> <article> <h3> CVE-2025-46154 - Foxcms SQL Time Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46154 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46154"> read more </a> </article> <hr> <article> <h3> CVE-2025-5498 - Slackero PHPwcms Remote Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5498 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the function file_get_contents/is_file of the file include/inc_lib/content/cnt21.readform.inc.php of the component Custom Source Tab. The manipulation of the argument cpage_custom leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.46 and 1.10.9 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5498"> read more </a> </article> <hr> <article> <h3> CVE-2025-5499 - Slackero PHPWCMS Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5499 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function is_file/getimagesize of the file image_resized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.46 and 1.10.9 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5499"> read more </a> </article> <hr> <article> <h3> CVE-2025-5501 - Open5GS NGAP PathSwitchRequest Message Handler Remote Assertion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5501 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_transfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5501"> read more </a> </article> <hr> <article> <h3> CVE-2025-5502 - TOTOLINK X15 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5502 <br> <strong>Published : </strong> June 3, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5502"> read more </a> </article> <hr> <article> <h3> CVE-2024-12718 - Python Tarfile Filter File Metadata and Permission Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12718 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this new default behavior then your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12718"> read more </a> </article> <hr> <article> <h3> CVE-2025-4138 - "Python Tarfile Symlink Extraction Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4138 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this new default behavior then your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4138"> read more </a> </article> <hr> <article> <h3> CVE-2025-4330 - Python Tarfile Symlink Extraction Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4330 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this new default behavior then your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4330"> read more </a> </article> <hr> <article> <h3> CVE-2025-4435 - TarFile Errorlevel Extraction Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4435 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4435"> read more </a> </article> <hr> <article> <h3> CVE-2025-4517 - Tarfile Filter Arbitrary File Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-4517 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this new default behavior then your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links. <br> <strong>Severity:</strong> 9.4 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4517"> read more </a> </article> <hr> <article> <h3> CVE-2025-5495 - Netgear WNR614 URL Handler Improper Authentication Remote RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-5495 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5495"> read more </a> </article> <hr> <article> <h3> CVE-2025-5497 - Slackero PHPWCMS Feedimport Module Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5497 <br> <strong>Published : </strong> June 3, 2025, 1:15 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been declared as critical. This vulnerability affects unknown code of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. The manipulation of the argument cnt_text leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.46 and 1.10.9 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5497"> read more </a> </article> <hr> <article> <h3> CVE-2025-4671 - WordPress Profile Builder Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4671 <br> <strong>Published : </strong> June 3, 2025, 12:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's user_meta and compare shortcodes in all versions up to, and including, 3.13.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4671"> read more </a> </article> <hr> <article> <h3> CVE-2025-5340 - Elementor Music Player Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5340 <br> <strong>Published : </strong> June 3, 2025, 12:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Music Player for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘album_buy_url’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5340"> read more </a> </article> <hr> <article> <h3> CVE-2025-4205 - WordPress Popup Maker Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4205 <br> <strong>Published : </strong> June 3, 2025, 12:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popupID' parameter in all versions up to, and including, 1.20.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4205"> read more </a> </article> <hr> <article> <h3> Rançongiciel ou ransomware, que faire ? (particuliers) </h3> <p>Un rançongiciel ou ransomware est un logiciel malveillant ou virus qui bloque l’accès à l’ordinateur ou à ses fichiers et qui réclame à la victime le paiement d’une rançon pour en obtenir de nouveau l’accès. Que faire en cas de ransomware ? Isoler les équipements touchés, ne pas…</p> <p class="feed-time"> Tue, 03 Jun 2025 11:38:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/rancongiciel-ransomware-particuliers"> read more </a> </article> <hr> <article> <h3> CVE-2025-5492 - D-Link DI-500WF-WT Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5492 <br> <strong>Published : </strong> June 3, 2025, 11:15 a.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub_456DE8 of the file /msp_info.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack can be launched remotely. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5492"> read more </a> </article> <hr> <article> <h3> CVE-2025-5493 - Baison Channel Middleware SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5493 <br> <strong>Published : </strong> June 3, 2025, 11:15 a.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5493"> read more </a> </article> <hr> <article> <h3> CVE-2024-36486 - Parallels Desktop for Mac Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-36486 <br> <strong>Published : </strong> June 3, 2025, 10:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver tool decompresses the file and writes the content back to its original location using root privileges. An attacker can exploit this process by using a hard link to write to an arbitrary file, potentially resulting in privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-36486"> read more </a> </article> <hr> <article> <h3> CVE-2024-52561 - Parallels Desktop for Mac Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52561 <br> <strong>Published : </strong> June 3, 2025, 10:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52561"> read more </a> </article> <hr> <article> <h3> CVE-2024-54189 - Parallels Desktop for Mac Root Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-54189 <br> <strong>Published : </strong> June 3, 2025, 10:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By using a hard link, an attacker can write to an arbitrary file, potentially leading to privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54189"> read more </a> </article> <hr> <article> <h3> CVE-2025-31359 - Parallels Desktop Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31359 <br> <strong>Published : </strong> June 3, 2025, 10:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31359"> read more </a> </article> <hr> <article> <h3> CVE-2025-4392 - WordPress Shared Files Frontend Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4392 <br> <strong>Published : </strong> June 3, 2025, 10:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via html File uploads in all versions up to, and including, 1.7.48 due to insufficient input sanitization and output escaping within the sanitize_file() function. This makes it possible for unauthenticated attackers to bypass the plugin’s MIME-only checks and inject arbitrary web scripts in pages that will execute whenever a user accesses the html file. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4392"> read more </a> </article> <hr> <article> <h3> CVE-2025-5103 - WooCommerce Ultimate Gift Cards SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5103 <br> <strong>Published : </strong> June 3, 2025, 9:15 a.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'default_price' and 'product_id' parameters in all versions up to, and including, 3.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5103"> read more </a> </article> <hr> <article> <h3> CVE-2025-5116 - WordPress WP Plugin Info Card Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5116 <br> <strong>Published : </strong> June 3, 2025, 9:15 a.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This issue is due to an incomplete patch for CVE-2025-31835. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5116"> read more </a> </article> <hr> <article> <h3> CVE-2025-1725 - WordPress Bit File Manager Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1725 <br> <strong>Published : </strong> June 3, 2025, 9:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1725"> read more </a> </article> <hr> <article> <h3> CVE-2025-4420 - Vayu Blocks Stored Cross-Site Scripting (XSS) in WordPress </h3> <p> <strong>CVE ID : </strong>CVE-2025-4420 <br> <strong>Published : </strong> June 3, 2025, 9:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerWidth’ parameter in all versions up to, and including, 1.3.1 due to a missing capability check on the vayu_blocks_option_panel_callback() function and insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4420"> read more </a> </article> <hr> <article> <h3> Rançongiciel ou ransomware : que faire si votre organisation est victime d’une attaque ? </h3> <p>Une attaque par rançongiciel vise à bloquer l’accès à un équipement ou un système, ou à en chiffrer et/ou copier les données, en échange d’une rançon. Que faire en cas de ransomware ? Couper les connexions à Internet du réseau attaqué, identifier et déconnecter les machines…</p> <p class="feed-time"> Tue, 03 Jun 2025 09:00:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/rancongiciels-ransomwares"> read more </a> </article> <hr> <article> <h3> CVE-2025-41428 - TimeWorks Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41428 <br> <strong>Published : </strong> June 3, 2025, 8:15 a.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41428"> read more </a> </article> <hr> <article> <h3> CVE-2025-46355 - PC Time Tracer Elevation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46355 <br> <strong>Published : </strong> June 3, 2025, 8:15 a.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46355"> read more </a> </article> <hr> <article> <h3> CVE-2025-21479 - NVIDIA GPU Unauthenticated Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21479 <br> <strong>Published : </strong> June 3, 2025, 7:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21479"> read more </a> </article> <hr> <article> <h3> CVE-2025-27031 - Cisco Router IOCTL Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-27031 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27031"> read more </a> </article> <hr> <article> <h3> CVE-2025-27038 - Google Chrome Adreno GPU Driver Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-27038 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27038"> read more </a> </article> <hr> <article> <h3> CVE-2025-31710 - Cisco Engineermode Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31710 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31710"> read more </a> </article> <hr> <article> <h3> CVE-2025-31711 - Apache CPLog Null Pointer Dereference Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-31711 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with no additional execution privileges needed. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31711"> read more </a> </article> <hr> <article> <h3> CVE-2025-31712 - Cisco cplog Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31712 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31712"> read more </a> </article> <hr> <article> <h3> CVE-2025-3584 - WordPress Newsletter Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3584 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3584"> read more </a> </article> <hr> <article> <h3> CVE-2025-3662 - FancyBox for WordPress Unauthenticated Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-3662 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3662"> read more </a> </article> <hr> <article> <h3> CVE-2025-4567 - WordPress Post Slider Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4567 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4567"> read more </a> </article> <hr> <article> <h3> CVE-2025-21463 - Cisco Wireless EHT IE Beacon Frame Processing Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21463 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Transient DOS while processing the EHT operation IE in the received beacon frame. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21463"> read more </a> </article> <hr> <article> <h3> CVE-2025-21480 - NVIDIA GPU Micronode Command Execution Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-21480 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21480"> read more </a> </article> <hr> <article> <h3> CVE-2025-21485 - Apache Kafka FastRPC Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21485 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21485"> read more </a> </article> <hr> <article> <h3> CVE-2025-21486 - Apache HTTP Server Heap Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21486 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21486"> read more </a> </article> <hr> <article> <h3> CVE-2025-27029 - Cisco Router Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-27029 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Transient DOS while processing the tone measurement response buffer when the response buffer is out of range. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27029"> read more </a> </article> <hr> <article> <h3> CVE-2024-53018 - Cisco IOS Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53018 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while processing the OIS packet parser. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53018"> read more </a> </article> <hr> <article> <h3> CVE-2024-53019 - Cisco RTP Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53019 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53019"> read more </a> </article> <hr> <article> <h3> CVE-2024-53020 - Apache Tomcat RTP Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53020 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Information disclosure may occur while decoding the RTP packet with invalid header extension from network. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53020"> read more </a> </article> <hr> <article> <h3> CVE-2024-53021 - F5 Big-IP Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53021 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Information disclosure may occur while processing goodbye RTCP packet from network. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53021"> read more </a> </article> <hr> <article> <h3> CVE-2024-53026 - Nokia IMS RTCP Packet Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53026 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53026"> read more </a> </article> <hr> <article> <h3> CVE-2024-53013 - Google Android Audio Call Registration Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2024-53013 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while processing voice call registration with user. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53013"> read more </a> </article> <hr> <article> <h3> CVE-2024-53015 - Apache VFS Filesystem Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2024-53015 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption while processing IOCTL command to handle buffers associated with a session. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53015"> read more </a> </article> <hr> <article> <h3> CVE-2024-53016 - Canon Camera Off-Path Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53016 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption while processing I2C settings in Camera driver. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53016"> read more </a> </article> <hr> <article> <h3> CVE-2024-53017 - Citrix ADC Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53017 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>Memory corruption while handling test pattern generator IOCTL command. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53017"> read more </a> </article> <hr> <article> <h3> CVE-2024-53010 - VMware ESXi Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53010 <br> <strong>Published : </strong> June 3, 2025, 6:15 a.m. | 36 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while attaching VM when the HLOS retains access to VM. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53010"> read more </a> </article> <hr> <article> <h3> CVE-2025-4797 - "Golo - City Travel Guide WordPress Theme Privilege Escalation via Account Takeover" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4797 <br> <strong>Published : </strong> June 3, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an authorization cookie. This makes it possible for unauthenticated attackers to log in as any user, including administrators, provided they know the user's email address. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4797"> read more </a> </article> <hr> <article> <h3> CVE-2025-4224 - WordPress wpForo Advanced Attachments Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4224 <br> <strong>Published : </strong> June 3, 2025, 3:15 a.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4224"> read more </a> </article> <hr> <article> <h3> CVE-2025-2939 - WordPress Ninja Tables PHP Object Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-2939 <br> <strong>Published : </strong> June 3, 2025, 3:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrusted input from the args[callback] parameter . This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute arbitrary functions, though it does not allow user supplied parameters only single functions can be called so the impact is limited. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2939"> read more </a> </article> <hr> <article> <h3> CVE-2025-4047 - WordPress Broken Link Checker Unauthorized Data Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4047 <br> <strong>Published : </strong> June 3, 2025, 3:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashboard_status functions in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view the plugin's status. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4047"> read more </a> </article> <hr> <article> <h3> CVE-2025-49162 - Arris VIP1113 TFTP File Overwrite Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49162 <br> <strong>Published : </strong> June 3, 2025, 12:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49162"> read more </a> </article> <hr> <article> <h3> CVE-2025-49163 - Arris VIP1113 Boot Image Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49163 <br> <strong>Published : </strong> June 3, 2025, 12:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49163"> read more </a> </article> <hr> <article> <h3> CVE-2025-49164 - Arris VIP1113 TV Set-Top Box Firmware Decryption Key Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-49164 <br> <strong>Published : </strong> June 3, 2025, 12:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49164"> read more </a> </article> <hr> <article> <h3> CVE-2025-5068 - Google Chrome Blink Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5068 <br> <strong>Published : </strong> June 3, 2025, 12:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5068"> read more </a> </article> <hr> <article> <h3> CVE-2025-5419 - Google Chrome Heap Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5419 <br> <strong>Published : </strong> June 3, 2025, 12:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 03 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5419"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Kaviari </h3> <p>nom, prénom, genre, date de naissance, adresse mail, adresse postale, numéro de téléphone, identifiant, mot de passe, numéro client, historique des commandes</p> <p class="feed-time"> Tue Jun 03 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Kaviari-2025-06-03"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cartier </h3> <p>nom, adresse courriel, pays</p> <p class="feed-time"> Tue Jun 03 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cartier-2025-06-03"> read more </a> </article> <hr> <article> <h3> CVE-2025-3919 - WordPress Comments Import Export Plugin Unauthenticated Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3919 <br> <strong>Published : </strong> June 2, 2025, 11:15 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>The WordPress Comments Import & Export plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings function in all versions up to, and including, 2.4.3. Additionally, the plugin fails to properly sanitize and escape FTP settings parameters. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts on the plugin settings page that will execute whenever an administrative user accesses an injected page. The vulnerability was partially fixed in version 2.4.3 and fully fixed in version 2.4.4 <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3919"> read more </a> </article> <hr> <article> <h3> CVE-2025-47585 - Mage People Team Booking and Rental Manager Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47585 <br> <strong>Published : </strong> June 2, 2025, 8:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Mage people team Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through 2.3.8. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47585"> read more </a> </article> <hr> <article> <h3> CVE-2025-48387 - Tar-fs Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48387 <br> <strong>Published : </strong> June 2, 2025, 8:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore non files/directories. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48387"> read more </a> </article> <hr> <article> <h3> CVE-2025-48996 - HAX Penn State University Open-Apis Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48996 <br> <strong>Published : </strong> June 2, 2025, 8:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University deployment of the HAX content management system via the `haxPsuUsage` API endpoint, related to a flat present in open-apis versions up to and including 10.0.2. This allows any remote unauthenticated user to retrieve a full list of PSU websites hosted on HAX CMS. When chained with other authorization issues (e.g., HAX-3), this could assist in targeted attacks such as unauthorized content modification or deletion. Commit 06c2e1fbb7131a8fe66aa0600f38dcacae6b7ac7 patches the vulnerability. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48996"> read more </a> </article> <hr> <article> <h3> CVE-2025-1051 - Sonos Era 300 ALAC Data Heap Buffer Overflow Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1051 <br> <strong>Published : </strong> June 2, 2025, 7:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of ALAC data. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the anacapa user. Was ZDI-CAN-25865. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1051"> read more </a> </article> <hr> <article> <h3> CVE-2025-23099 - Samsung Exynos OOB Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23099 <br> <strong>Published : </strong> June 2, 2025, 7:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23099"> read more </a> </article> <hr> <article> <h3> CVE-2025-23105 - Samsung Mobile Processor Exynos Use-After-Free Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23105 <br> <strong>Published : </strong> June 2, 2025, 7:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23105"> read more </a> </article> <hr> <article> <h3> CVE-2025-49069 - Cimatti Consulting Contact Forms CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-49069 <br> <strong>Published : </strong> June 2, 2025, 7:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: from n/a through 1.9.8. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49069"> read more </a> </article> <hr> <article> <h3> CVE-2025-20298 - Splunk Universal Forwarder Windows Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20298 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20298"> read more </a> </article> <hr> <article> <h3> CVE-2025-23104 - Samsung Mobile Processor Exynos Use-After-Free Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23104 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23104"> read more </a> </article> <hr> <article> <h3> CVE-2025-27953 - Citrix Clinical Collaboration Platform Remote Code Execution and Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-27953 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27953"> read more </a> </article> <hr> <article> <h3> CVE-2025-27954 - Apache Clinical Collaboration Platform Cross-Site Scripting (XSS) and Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-27954 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27954"> read more </a> </article> <hr> <article> <h3> CVE-2025-27955 - Clinical Collaboration Platform Session Token Weakness (Authentication Bypass) </h3> <p> <strong>CVE ID : </strong>CVE-2025-27955 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27955"> read more </a> </article> <hr> <article> <h3> CVE-2025-27956 - WebLaudos Directory Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-27956 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via the id parameter. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27956"> read more </a> </article> <hr> <article> <h3> CVE-2025-45387 - osTicket Broken Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45387 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45387"> read more </a> </article> <hr> <article> <h3> CVE-2025-5086 - DELmia Apriso Deserialization Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-5086 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025Â could lead to a remote code execution. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5086"> read more </a> </article> <hr> <article> <h3> CVE-2025-20297 - Splunk Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20297 <br> <strong>Published : </strong> June 2, 2025, 6:15 p.m. | 11 hours, 10 minutes ago <br> <strong>Description : </strong>In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20297"> read more </a> </article> <hr> <article> <h3> CVE-2025-48994 - SignXML Algorithm Confusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48994 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set (`signxml.XMLVerifier.verify(require_x509=False, hmac_key=...`), versions of SignXML prior to 4.0.4 are vulnerable to a potential algorithm confusion attack. Unless the user explicitly limits the expected signature algorithms using the `signxml.XMLVerifier.verify(expect_config=...)` setting, an attacker may supply a signature unexpectedly signed with a key other than the provided HMAC key, using a different (asymmetric key) signature algorithm. Starting with SignXML 4.0.4, specifying `hmac_key` causes the set of accepted signature algorithms to be restricted to HMAC only, if not already restricted by the user. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48994"> read more </a> </article> <hr> <article> <h3> CVE-2025-48995 - SignXML Timing Attack HMAC Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-48995 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set (`signxml.XMLVerifier.verify(require_x509=False, hmac_key=...`), versions of SignXML prior to 4.0.4 are vulnerable to a potential timing attack. The verifier may leak information about the correct HMAC when comparing it with the user supplied hash, allowing users to reconstruct the correct HMAC for any data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48995"> read more </a> </article> <hr> <article> <h3> CVE-2025-5036 - Autodesk Revit Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5036 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5036"> read more </a> </article> <hr> <article> <h3> CVE-2024-1440 - WSO2 Open Redirection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-1440 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to an attacker-controlled site. By exploiting this vulnerability, an attacker may trick users into visiting a malicious page, enabling phishing attacks to harvest sensitive information or perform other harmful actions. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-1440"> read more </a> </article> <hr> <article> <h3> CVE-2024-3509 - WSO2 Management Console Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2024-3509 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within the registry section. To exploit this vulnerability, a malicious actor must have a valid user account with administrative access to the Management Console. If successful, the actor could inject persistent JavaScript payloads, enabling the theft of user data or execution of unauthorized actions on behalf of other users. While this issue enables persistent client-side script execution, session-related cookies remain protected with the httpOnly flag, preventing session hijacking. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-3509"> read more </a> </article> <hr> <article> <h3> CVE-2024-7073 - WSO2 SOAP SSRF Attack Vector </h3> <p> <strong>CVE ID : </strong>CVE-2024-7073 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the network or filesystem. Exploitation of this vulnerability could lead to unauthorized access to sensitive data and systems, including resources within private networks, as long as they are reachable by the affected product. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7073"> read more </a> </article> <hr> <article> <h3> CVE-2024-7074 - WSO2 SOAP Admin File Upload RCE </h3> <p> <strong>CVE ID : </strong>CVE-2024-7074 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server. By leveraging this vulnerability, an attacker could upload a specially crafted payload, potentially achieving remote code execution (RCE) on the server. Exploitation requires valid admin credentials, limiting its impact to authorized but potentially malicious users. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7074"> read more </a> </article> <hr> <article> <h3> CVE-2024-8008 - "Apache [Vendor Name] Reflected Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-8008 <br> <strong>Published : </strong> June 2, 2025, 5:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability exists in multiple [Vendor Name] products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser to execute arbitrary JavaScript in the context of the vulnerable page. This vulnerability may allow UI manipulation, redirection to malicious websites, or data exfiltration from the browser. However, since all session-related sensitive cookies are protected with the httpOnly flag, session hijacking is not possible. <br> <strong>Severity:</strong> 5.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-8008"> read more </a> </article> <hr> <article> <h3> Professionnels : quelles sont les cybermenaces les plus fréquentes en 2024 ? </h3> <p><p>Hameçonnage, piratage de compte, rançongiciel, faux ordre de virement… Découvrez les principales tendances et évolutions des menaces qui ciblent les entreprises, associations, collectivités et administrations en 2024, selon notre dernier rapport d’activité.</p> </p> <p class="feed-time"> Mon, 02 Jun 2025 16:42:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/top-10-cybermenaces-professionnels-2024"> read more </a> </article> <hr> <article> <h3> CVE-2025-48941 - MyBB Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48941 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden (draft, unapproved, or soft-deleted) threads containing specified text in the title. The visibility state (`mybb_threads.visible` integer column) of threads is not validated in internal search queries, whose result is used to output a general success or failure of the search. While MyBB validates permissions when displaying the final search results, a search operation that internally produces at least one result outputs a redirect response (as a HTTP redirect, or a success message page with delayed redirect, depending on configuration). On the other hand, a search operation that internally produces no results outputs a corresponding message in the response without a redirect. This allows a user to determine whether threads matching title search parameters exist, including draft threads (`visible` with a value of `-2`), soft-deleted threads (`visible` with a value of `-1`), and unapproved threads (`visible` with a value of `0`); in addition to displaying generally visible threads (`visible` with a value of `1`). This vulnerability does not affect other layers of permissions. In order to exploit the vulnerability, the user must have access to the search functionality, and general access to forums containing the thread(s). The vulnerability does not expose the message content of posts. MyBB 1.8.39 resolves this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48941"> read more </a> </article> <hr> <article> <h3> CVE-2025-45542 - CloudClassroom-PHP-Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45542 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45542"> read more </a> </article> <hr> <article> <h3> CVE-2025-48866 - ModSecurity SanitizeArg Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48866 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The `sanitiseArg` (and `sanitizeArg` - this is the same action but an alias) is vulnerable to adding an excessive number of arguments, thereby leading to denial of service. Version 2.9.10 fixes the issue. As a workaround, avoid using rules that contain the `sanitiseArg` (or `sanitizeArg`) action. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48866"> read more </a> </article> <hr> <article> <h3> CVE-2025-48940 - MyBB Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48940 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>MyBB is free and open source forum software. Prior to version 1.8.39, the upgrade component does not validate user input properly, which allows attackers to perform local file inclusion (LFI) via a specially crafted parameter value. In order to exploit the vulnerability, the installer must be unlocked (no `install/lock` file present) and the upgrade script must be accessible (by re-installing the forum via access to `install/index.php`; when the forum has not yet been installed; or the attacker is authenticated as a forum administrator). MyBB 1.8.39 resolves this issue. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48940"> read more </a> </article> <hr> <article> <h3> CVE-2024-40113 - Sitecom WLX-2006 Default Credentials Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40113 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40113"> read more </a> </article> <hr> <article> <h3> CVE-2024-40114 - Sitecom WLX-2006 Wall Mount Range Extender XSS Language Cookie Manipulation </h3> <p> <strong>CVE ID : </strong>CVE-2024-40114 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40114"> read more </a> </article> <hr> <article> <h3> CVE-2024-57459 - CloudClassroom PHP Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57459 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57459"> read more </a> </article> <hr> <article> <h3> CVE-2025-44115 - Cotonti Siena Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44115 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44115"> read more </a> </article> <hr> <article> <h3> CVE-2024-40112 - Sitecom WLX-2006 Wall Mount Range Extender N300 LFI Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40112 <br> <strong>Published : </strong> June 2, 2025, 4:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40112"> read more </a> </article> <hr> <article> <h3> CVE-2024-48877 - Microsoft Xls2csv Heap Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-48877 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48877"> read more </a> </article> <hr> <article> <h3> CVE-2024-52035 - Catdoc OLE Document File Allocation Table Parser Integer Overflow Heap Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52035 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52035"> read more </a> </article> <hr> <article> <h3> CVE-2024-54028 - Catdoc OLE Document DIFAT Parser Integer Underflow Heap-Based Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2024-54028 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54028"> read more </a> </article> <hr> <article> <h3> CVE-2025-20001 - FontCreator Font Out-of-Bounds Read Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-20001 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20001"> read more </a> </article> <hr> <article> <h3> CVE-2025-37095 - HPE StoreOnce Directory Traversal Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37095 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37095"> read more </a> </article> <hr> <article> <h3> CVE-2025-37096 - HPE StoreOnce Command Injection RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-37096 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A command injection remote code execution vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37096"> read more </a> </article> <hr> <article> <h3> CVE-2025-44172 - Tenda AC6 Stack Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-44172 <br> <strong>Published : </strong> June 2, 2025, 3:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44172"> read more </a> </article> <hr> <article> <h3> CVE-2025-5447 - Linksys Wireless Router OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5447 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter. The manipulation of the argument apselect_%d/newap_text_%d leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5447"> read more </a> </article> <hr> <article> <h3> CVE-2024-57783 - "Dot Desktop XSS Command Execution" </h3> <p> <strong>CVE ID : </strong>CVE-2024-57783 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML (in render.js), and because the Electron window can access Node.js APIs. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57783"> read more </a> </article> <hr> <article> <h3> CVE-2025-37089 - HPE StoreOnce Command Injection Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37089 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A command injection remote code execution vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37089"> read more </a> </article> <hr> <article> <h3> CVE-2025-37090 - HPE StoreOnce Server-Side Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37090 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A server-side request forgery vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37090"> read more </a> </article> <hr> <article> <h3> CVE-2025-37091 - HPE StoreOnce Command Injection Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37091 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A command injection remote code execution vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37091"> read more </a> </article> <hr> <article> <h3> CVE-2025-37092 - HPE StoreOnce Command Injection Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-37092 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A command injection remote code execution vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37092"> read more </a> </article> <hr> <article> <h3> CVE-2025-37093 - HPE StoreOnce Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37093 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>An authentication bypass vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37093"> read more </a> </article> <hr> <article> <h3> CVE-2025-37094 - HPE StoreOnce Directory Traversal File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37094 <br> <strong>Published : </strong> June 2, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37094"> read more </a> </article> <hr> <article> <h3> CVE-2024-12168 - Yandex Telemost DLL Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12168 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12168"> read more </a> </article> <hr> <article> <h3> CVE-2025-26396 - SolarWinds Dameware Mini Remote Control Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26396 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26396"> read more </a> </article> <hr> <article> <h3> CVE-2025-46806 - "sslh Denial of Service Pointer Offset Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46806 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46806"> read more </a> </article> <hr> <article> <h3> CVE-2025-48745 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48745 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-49113. Reason: This candidate is a reservation duplicate of CVE-2025-49113. Notes: All CVE users should reference CVE-2025-49113 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48745"> read more </a> </article> <hr> <article> <h3> CVE-2025-5445 - Linksys Wireless Router OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5445 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this issue is the function RP_checkFWByBBS of the file /goform/RP_checkFWByBBS. The manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5445"> read more </a> </article> <hr> <article> <h3> CVE-2025-5446 - "Linksys Router Remote OS Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5446 <br> <strong>Published : </strong> June 2, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been classified as critical. This affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. The manipulation of the argument pwd leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5446"> read more </a> </article> <hr> <article> <h3> CVE-2025-48958 - Froxlor HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48958 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by redirecting users to malicious external websites. The vulnerability has a medium severity, as it can be exploited through user input without authentication. Version 2.2.6 fixes the issue. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48958"> read more </a> </article> <hr> <article> <h3> CVE-2025-48990 - NeKernal Heap Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-48990 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in `rt_copy_memory`, which unconditionally wrote a null terminator at `dst[len]`. When `len` equals the size of the destination buffer (256 bytes), that extra `'\0'` write overruns the buffer by one byte. To avoid breaking existing callers or changing the public API, the patch in commit fb7b7f658327f659c6a6da1af151cb389c2ca4ee takes a minimal approach: it simply removes the overflow-causing line without adding bounds checks or altering the function signature. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48990"> read more </a> </article> <hr> <article> <h3> CVE-2025-5443 - "Linksys Wireless Router Os Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5443 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function wirelessAdvancedHidden of the file /goform/wirelessAdvancedHidden. The manipulation of the argument ExtChSelector/24GSelector/5GSelector leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5443"> read more </a> </article> <hr> <article> <h3> CVE-2025-5444 - "Linksys Wireless Router RP_UpgradeFWByBBS OS Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5444 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001 and classified as critical. Affected by this vulnerability is the function RP_UpgradeFWByBBS of the file /goform/RP_UpgradeFWByBBS. The manipulation of the argument type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5444"> read more </a> </article> <hr> <article> <h3> CVE-2025-46807 - SSLH File Descriptor Exhaustion Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46807 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46807"> read more </a> </article> <hr> <article> <h3> CVE-2025-48495 - Gokapi Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48495 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. By renaming the friendly name of an API key, an authenticated user could inject JS into the API key overview, which would also be executed when another user clicks on his API tab. Prior to version 2.0.0, there was no user permission system implemented, therefore all authenticated users were already able to see and modify all resources, even if end-to-end encrypted, as the encryption key had to be the same for all users of versions prior to 2.0.0. If a user is the only authenticated user using Gokapi, they are not affected. This issue has been fixed in v2.0.0. A workaround would be to not open the API page if it is possible that another user might have injected code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48495"> read more </a> </article> <hr> <article> <h3> CVE-2025-48955 - "Para Exposes Access and Secret Keys in Logs" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48955 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require logging for debugging or system health purposes. Version 1.50.8 fixes the issue. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48955"> read more </a> </article> <hr> <article> <h3> CVE-2025-48957 - AstrBot Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48957 <br> <strong>Published : </strong> June 2, 2025, 12:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48957"> read more </a> </article> <hr> <article> <h3> CVE-2025-48494 - Gokapi Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48494 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. When using end-to-end encryption, a stored cross-site scripting vulnerability can be exploited by uploading a file with JavaScript code embedded in the filename. After upload and every time someone opens the upload list, the script is then parsed. Prior to version 2.0.0, there was no user permission system implemented, therefore all authenticated users were already able to see and modify all resources, even if end-to-end encrypted, as the encryption key had to be the same for all users using a version prior to 2.0.0. If a user is the only authenticated user using Gokapi, they are not affected. This issue has been fixed in v2.0.0. A possible workaround would be to disable end-to-end encryption. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48494"> read more </a> </article> <hr> <article> <h3> CVE-2025-5441 - Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 Os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5441 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The manipulation of the argument DeviceURL leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5441"> read more </a> </article> <hr> <article> <h3> CVE-2025-5442 - Linksys Router Os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5442 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_pingGatewayByBBS of the file /goform/RP_pingGatewayByBBS. The manipulation of the argument ip/nm/gw leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5442"> read more </a> </article> <hr> <article> <h3> CVE-2025-0073 - Arm Ltd Valhall GPU Kernel Driver: After Free Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-0073 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 before r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 before r54p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0073"> read more </a> </article> <hr> <article> <h3> CVE-2025-0819 - Arm Ltd Bifrost GPU Kernel Driver/Arm Ltd Valhall GPU Kernel Driver/Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver: After Free Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0819 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r44p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r44p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r44p0 through r49p3, from r50p0 through r54p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0819"> read more </a> </article> <hr> <article> <h3> CVE-2025-1246 - Arm Ltd Bifrost GPU Userspace Driver/Valhall GPU Userspace Driver/Arm 5th Gen GPU Architecture Userspace Driver Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-1246 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r18p0 through r49p3, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r28p0 through r49p3, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p3, from r50p0 through r54p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1246"> read more </a> </article> <hr> <article> <h3> CVE-2025-29785 - QUIC-go Nil-Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29785 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added in the v0.50.0 release can be used to trigger a nil-pointer dereference by a malicious QUIC client. In order to do so, the attacker first sends valid QUIC packets from different remote addresses (thereby triggering the newly added path validation logic: the server sends path probe packets), and then sending ACKs for packets received from the server specifically crafted to trigger the nil-pointer dereference. v0.50.1 contains a patch that fixes the vulnerability. This release contains a test that generates random sequences of sent packets (both regular and path probe packets), that was used to verify that the patch actually covers all corner cases. No known workarounds are available. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29785"> read more </a> </article> <hr> <article> <h3> CVE-2025-3454 - Grafana Datasource Proxy API Slash Path Bypass Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3454 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily affects datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3454"> read more </a> </article> <hr> <article> <h3> CVE-2025-47272 - Phoenix eCommerce Account Deletion Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47272 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session (e.g., on a shared/public machine) could permanently delete the user’s account without knowledge of the password. This bypass of re-authentication puts users at risk of account loss and data disruption. Version 1.1.0.3 contains a patch for the issue. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47272"> read more </a> </article> <hr> <article> <h3> CVE-2025-47289 - CE Phoenix Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47289 <br> <strong>Published : </strong> June 2, 2025, 11:15 a.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once submitted, if the shop owner (admin) approves the testimonial, the script executes in the context of any user visiting the testimonial page. Because the session cookies are not marked with the `HttpOnly` flag, they can be exfiltrated by the attacker — potentially leading to account takeover. Version 1.1.0.3 fixes the issue. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47289"> read more </a> </article> <hr> <article> <h3> CVE-2025-5440 - Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP Os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5440 <br> <strong>Published : </strong> June 2, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function NTP of the file /goform/NTP. The manipulation of the argument manual_year_select/manual_month_select/manual_day_select/manual_hour_select/manual_min_select/manual_sec_select leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5440"> read more </a> </article> <hr> <article> <h3> CVE-2025-1750 - DuckDBVectorStore SQL Injection Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-1750 <br> <strong>Published : </strong> June 2, 2025, 10:15 a.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE). <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1750"> read more </a> </article> <hr> <article> <h3> CVE-2025-3260 - Grafana Dashboard Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3260 <br> <strong>Published : </strong> June 2, 2025, 10:15 a.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions (v0alpha1, v1alpha1, v2alpha1). Impact: - Viewers can view all dashboards/folders regardless of permissions - Editors can view/edit/delete all dashboards/folders regardless of permissions - Editors can create dashboards in any folder regardless of permissions - Anonymous users with viewer/editor roles are similarly affected Organization isolation boundaries remain intact. The vulnerability only affects dashboard access and does not grant access to datasources. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3260"> read more </a> </article> <hr> <article> <h3> CVE-2025-5439 - "Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 Facebook Like Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5439 <br> <strong>Published : </strong> June 2, 2025, 10:15 a.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been rated as critical. Affected by this issue is the function verifyFacebookLike of the file /goform/verifyFacebookLike. The manipulation of the argument uid/accessToken leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5439"> read more </a> </article> <hr> <article> <h3> CVE-2025-5437 - Multilaser Sirius RE016 MLT1.0 CGI Password Change Handler Remote Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5437 <br> <strong>Published : </strong> June 2, 2025, 9:15 a.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5437"> read more </a> </article> <hr> <article> <h3> CVE-2025-5438 - Linksys WPS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5438 <br> <strong>Published : </strong> June 2, 2025, 9:15 a.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5438"> read more </a> </article> <hr> <article> <h3> CVE-2025-5455 - Qt Denial of Service Vulnerability in qDecodeDataUrl Function </h3> <p> <strong>CVE ID : </strong>CVE-2025-5455 <br> <strong>Published : </strong> June 2, 2025, 9:15 a.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value (such as "data:charset,"), and Qt was built with assertions enabled, then it would hit an assertion, resulting in a denial of service (abort). This impacts Qt up to 5.15.18, 6.0.0->6.5.8, 6.6.0->6.8.3 and 6.9.0. This has been fixed in 5.15.19, 6.5.9, 6.8.4 and 6.9.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5455"> read more </a> </article> <hr> <article> <h3> CVE-2025-0324 - VAPIX Device Configuration Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0324 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges. <br> <strong>Severity:</strong> 9.4 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0324"> read more </a> </article> <hr> <article> <h3> CVE-2025-0325 - Axis Guard Tour VAPIX API Parameter Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0325 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0325"> read more </a> </article> <hr> <article> <h3> CVE-2025-0358 - Axis VAPIX Device Configuration Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0358 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0358"> read more </a> </article> <hr> <article> <h3> CVE-2025-5113 - Diviotec Professional Series Web Interface Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5113 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5113"> read more </a> </article> <hr> <article> <h3> CVE-2025-5435 - Marwal Infotech CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5435 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /page.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5435"> read more </a> </article> <hr> <article> <h3> CVE-2025-5436 - Multilaser Sirius RE016 Information Disclosure Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5436 <br> <strong>Published : </strong> June 2, 2025, 8:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5436"> read more </a> </article> <hr> <article> <h3> CVE-2025-5433 - Fengoffice SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5433 <br> <strong>Published : </strong> June 2, 2025, 7:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php?c=account&a=set_timezone. The manipulation of the argument tz_offset leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5433"> read more </a> </article> <hr> <article> <h3> CVE-2025-5434 - Aem Solutions CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5434 <br> <strong>Published : </strong> June 2, 2025, 7:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5434"> read more </a> </article> <hr> <article> <h3> CVE-2025-1235 - Cisco Switch Date Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1235 <br> <strong>Published : </strong> June 2, 2025, 7:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1235"> read more </a> </article> <hr> <article> <h3> CVE-2025-4010 - Netcom NTC 6200 and NWL 222 Web Interface Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4010 <br> <strong>Published : </strong> June 2, 2025, 7:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers can gain arbitrary code execution with elevated privileges. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4010"> read more </a> </article> <hr> <article> <h3> CVE-2025-1485 - WordPress Real Cookie Banner Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1485 <br> <strong>Published : </strong> June 2, 2025, 6:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>The Real Cookie Banner: GDPR & ePrivacy Cookie Consent WordPress plugin before 5.1.6, real-cookie-banner-pro WordPress plugin before 5.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1485"> read more </a> </article> <hr> <article> <h3> CVE-2025-3951 - WordPress WP-Optimize SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3951 <br> <strong>Published : </strong> June 2, 2025, 6:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3951"> read more </a> </article> <hr> <article> <h3> CVE-2025-5431 - AssamLook CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5431 <br> <strong>Published : </strong> June 2, 2025, 6:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in AssamLook CMS 1.0. Affected is an unknown function of the file /department-profile.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5431"> read more </a> </article> <hr> <article> <h3> CVE-2025-5432 - AssamLook CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5432 <br> <strong>Published : </strong> June 2, 2025, 6:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in AssamLook CMS 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_tender.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5432"> read more </a> </article> <hr> <article> <h3> CVE-2025-5429 - Juzaweb CMS Remote Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5429 <br> <strong>Published : </strong> June 2, 2025, 5:16 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 05:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5429"> read more </a> </article> <hr> <article> <h3> CVE-2025-5430 - AssamLook CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5430 <br> <strong>Published : </strong> June 2, 2025, 5:16 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in AssamLook CMS 1.0. This issue affects some unknown processing of the file /product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 05:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5430"> read more </a> </article> <hr> <article> <h3> CVE-2025-49112 - Valkey TCP/IP Stack Integer Underflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49112 <br> <strong>Published : </strong> June 2, 2025, 5:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49112"> read more </a> </article> <hr> <article> <h3> CVE-2025-49113 - Roundcube Webmail PHP Object Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-49113 <br> <strong>Published : </strong> June 2, 2025, 5:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-49113"> read more </a> </article> <hr> <article> <h3> CVE-2025-25179 - Citrix XenServer GPU Escalation of Privilege </h3> <p> <strong>CVE ID : </strong>CVE-2025-25179 <br> <strong>Published : </strong> June 2, 2025, 5:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25179"> read more </a> </article> <hr> <article> <h3> CVE-2024-11857 - Realtek Bluetooth HCI Adaptor Link Following Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-11857 <br> <strong>Published : </strong> June 2, 2025, 4:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary file deletion to privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11857"> read more </a> </article> <hr> <article> <h3> CVE-2025-5427 - Juzaweb CMS Permalinks Page Remote Access Control Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5427 <br> <strong>Published : </strong> June 2, 2025, 4:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in juzaweb CMS up to 3.4.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin-cp/permalinks of the component Permalinks Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5427"> read more </a> </article> <hr> <article> <h3> CVE-2025-5428 - Juzaweb CMS Remote Improper Access Controls Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5428 <br> <strong>Published : </strong> June 2, 2025, 4:15 a.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/log-viewer of the component Error Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5428"> read more </a> </article> <hr> <article> <h3> CVE-2025-5424 - Juzaweb CMS Remote File Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5424 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical. This issue affects some unknown processing of the file /admin-cp/media of the component Media Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5424"> read more </a> </article> <hr> <article> <h3> CVE-2025-5425 - Juzaweb CMS Theme Editor Page Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5425 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as critical. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor Page. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5425"> read more </a> </article> <hr> <article> <h3> CVE-2025-5426 - Juzaweb CMS Menu Page Remote Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5426 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in juzaweb CMS up to 3.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-cp/menus of the component Menu Page. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5426"> read more </a> </article> <hr> <article> <h3> CVE-2025-20673 - "Netgear Wireless LAN STA Driver Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20673 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20673"> read more </a> </article> <hr> <article> <h3> CVE-2025-20674 - Aruba Wlan AP Driver Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20674 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20674"> read more </a> </article> <hr> <article> <h3> CVE-2025-20675 - Aruba WLAN STA Driver Uncaught Exception Vulnerability (Denial of Service) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20675 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20675"> read more </a> </article> <hr> <article> <h3> CVE-2025-20676 - Aruba WLAN STA Driver Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20676 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20676"> read more </a> </article> <hr> <article> <h3> CVE-2025-20677 - "Qualcomm Bluetooth Local Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20677 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20677"> read more </a> </article> <hr> <article> <h3> CVE-2025-20678 - "Openmind IMS Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20678 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20678"> read more </a> </article> <hr> <article> <h3> CVE-2025-20672 - Intel Bluetooth Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20672 <br> <strong>Published : </strong> June 2, 2025, 3:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20672"> read more </a> </article> <hr> <article> <h3> CVE-2025-5423 - Juzaweb CMS Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5423 <br> <strong>Published : </strong> June 2, 2025, 2:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5423"> read more </a> </article> <hr> <article> <h3> CVE-2025-5421 - Juzaweb CMS Plugin Editor Page Remote Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5421 <br> <strong>Published : </strong> June 2, 2025, 1:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5421"> read more </a> </article> <hr> <article> <h3> CVE-2025-5422 - "Juzaweb CMS Remote Unauthenticated Access Control Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5422 <br> <strong>Published : </strong> June 2, 2025, 1:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/logs/email of the component Email Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5422"> read more </a> </article> <hr> <article> <h3> CVE-2025-5412 - Mist Community Edition Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5412 <br> <strong>Published : </strong> June 2, 2025, 12:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file src/mist/api/views.py of the component Authentication Endpoint. The manipulation of the argument return_to leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The name of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5412"> read more </a> </article> <hr> <article> <h3> CVE-2025-5420 - Juzaweb CMS Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5420 <br> <strong>Published : </strong> June 2, 2025, 12:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/file-manager/upload of the component Profile Page. The manipulation of the argument Upload leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 02 Jun 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5420"> read more </a> </article> <hr> <article> <h3> CVE-2025-5410 - Mist Community Edition Cross-Site Request Forgery (CSRF) </h3> <p> <strong>CVE ID : </strong>CVE-2025-5410 <br> <strong>Published : </strong> June 1, 2025, 11:15 p.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_response of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is identified as db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5410"> read more </a> </article> <hr> <article> <h3> CVE-2025-5411 - Mist Community Edition Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5411 <br> <strong>Published : </strong> June 1, 2025, 11:15 p.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file src/mist/api/tag/views.py. The manipulation of the argument tag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is named db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5411"> read more </a> </article> <hr> <article> <h3> CVE-2025-5408 - WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3 and WL-WN576K1 HTTP POST Request Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5408 <br> <strong>Published : </strong> June 1, 2025, 10:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3 and WL-WN576K1 up to V1410_240222 and classified as critical. Affected by this issue is the function sys_login of the file /cgi-bin/login.cgi of the component HTTP POST Request Handler. The manipulation of the argument login_page leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5408"> read more </a> </article> <hr> <article> <h3> CVE-2025-5409 - Mist Community Edition API Token Handler Remote Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5409 <br> <strong>Published : </strong> June 1, 2025, 10:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Mist Community Edition up to 4.7.1. It has been classified as critical. This affects the function create_token of the file src/mist/api/auth/views.py of the component API Token Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The identifier of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5409"> read more </a> </article> <hr> <article> <h3> CVE-2025-5407 - "Chaitak-Gorai Blogbook Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5407 <br> <strong>Published : </strong> June 1, 2025, 9:15 p.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register_script.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5407"> read more </a> </article> <hr> <article> <h3> CVE-2025-5406 - "Chaitak-Gorai Blogbook Unrestricted File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5406 <br> <strong>Published : </strong> June 1, 2025, 7:15 p.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. Affected is an unknown function of the file /admin/posts.php?source=add_post. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5406"> read more </a> </article> <hr> <article> <h3> CVE-2025-5405 - Chaitak-Gorai Blogbook Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5405 <br> <strong>Published : </strong> June 1, 2025, 6:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This issue affects some unknown processing of the file /post.php. The manipulation of the argument comment_author/comment_email/comment_content leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5405"> read more </a> </article> <hr> <article> <h3> CVE-2025-5404 - Chaitak-Gorai Blogbook GET Parameter Handler Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5404 <br> <strong>Published : </strong> June 1, 2025, 5:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5404"> read more </a> </article> <hr> <article> <h3> CVE-2025-5403 - Chaitak-Gorai Blogbook SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5403 <br> <strong>Published : </strong> June 1, 2025, 4:15 p.m. | 12 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/view_all_posts.php of the component GET Parameter Handler. The manipulation of the argument post_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5403"> read more </a> </article> <hr> <article> <h3> CVE-2025-5402 - Chaitak-Gorai Blogbook SQL Injection Vulnerability in GET Parameter Handler </h3> <p> <strong>CVE ID : </strong>CVE-2025-5402 <br> <strong>Published : </strong> June 1, 2025, 2:15 p.m. | 14 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/includes/edit_post.php of the component GET Parameter Handler. The manipulation of the argument edit_post_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5402"> read more </a> </article> <hr> <article> <h3> CVE-2025-40908 - LibYAML YAML File Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40908 <br> <strong>Published : </strong> June 1, 2025, 2:15 p.m. | 13 hours, 11 minutes ago <br> <strong>Description : </strong>YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40908"> read more </a> </article> <hr> <article> <h3> CVE-2025-5401 - Chaitak-Gorai Blogbook SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5401 <br> <strong>Published : </strong> June 1, 2025, 1:15 p.m. | 14 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument p_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5401"> read more </a> </article> <hr> <article> <h3> CVE-2025-1499 - IBM InfoSphere Information Server Cleartext Database Credential Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-1499 <br> <strong>Published : </strong> June 1, 2025, 12:15 p.m. | 15 hours, 11 minutes ago <br> <strong>Description : </strong>IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1499"> read more </a> </article> <hr> <article> <h3> CVE-2025-25044 - IBM Planning Analytics Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25044 <br> <strong>Published : </strong> June 1, 2025, 12:15 p.m. | 15 hours, 11 minutes ago <br> <strong>Description : </strong>IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25044"> read more </a> </article> <hr> <article> <h3> CVE-2025-2896 - IBM Planning Analytics Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2896 <br> <strong>Published : </strong> June 1, 2025, 12:15 p.m. | 15 hours, 11 minutes ago <br> <strong>Description : </strong>IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2896"> read more </a> </article> <hr> <article> <h3> CVE-2025-33004 - IBM Planning Analytics Local File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33004 <br> <strong>Published : </strong> June 1, 2025, 12:15 p.m. | 15 hours, 11 minutes ago <br> <strong>Description : </strong>IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33004"> read more </a> </article> <hr> <article> <h3> CVE-2025-33005 - IBM Planning Analytics Session Impersonation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33005 <br> <strong>Published : </strong> June 1, 2025, 12:15 p.m. | 15 hours, 11 minutes ago <br> <strong>Description : </strong>IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33005"> read more </a> </article> <hr> <article> <h3> CVE-2025-5400 - "Chaitak-Gorai Blogbook SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5400 <br> <strong>Published : </strong> June 1, 2025, 9:15 a.m. | 18 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manipulation of the argument u_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 01 Jun 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5400"> read more </a> </article> <hr> <article> <h3> CVE-2025-5389 - JeeWMS Improper Access Controls Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5389 <br> <strong>Published : </strong> May 31, 2025, 7:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5389"> read more </a> </article> <hr> <article> <h3> CVE-2025-5390 - JeeWMS File Handler Improper Access Control Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5390 <br> <strong>Published : </strong> May 31, 2025, 7:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5390"> read more </a> </article> <hr> <article> <h3> CVE-2025-5387 - JeeWMS File Handler Improper Access Controls Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5387 <br> <strong>Published : </strong> May 31, 2025, 6:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5387"> read more </a> </article> <hr> <article> <h3> CVE-2025-5388 - JeeWMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5388 <br> <strong>Published : </strong> May 31, 2025, 6:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5388"> read more </a> </article> <hr> <article> <h3> CVE-2025-5385 - JeeWMS Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5385 <br> <strong>Published : </strong> May 31, 2025, 5:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5385"> read more </a> </article> <hr> <article> <h3> CVE-2025-5386 - JeeWMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5386 <br> <strong>Published : </strong> May 31, 2025, 5:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5386"> read more </a> </article> <hr> <article> <h3> CVE-2025-5384 - JeeWMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5384 <br> <strong>Published : </strong> May 31, 2025, 4:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5384"> read more </a> </article> <hr> <article> <h3> CVE-2025-5381 - Yifang CMS Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5381 <br> <strong>Published : </strong> May 31, 2025, 3:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function downloadFile of the file /api/File/downloadFile of the component Admin Panel. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5381"> read more </a> </article> <hr> <article> <h3> CVE-2025-5383 - Yifang CMS Article Management Module Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5383 <br> <strong>Published : </strong> May 31, 2025, 3:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknown functionality of the component Article Management Module. The manipulation of the argument Default Value leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5383"> read more </a> </article> <hr> <article> <h3> CVE-2025-5379 - NuCom NC-WR744G Console Application Hard-Coded Credentials Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5379 <br> <strong>Published : </strong> May 31, 2025, 2:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307. This vulnerability affects unknown code of the component Console Application. The manipulation of the argument CMCCAdmin/useradmin/CUAdmin leads to hard-coded credentials. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5379"> read more </a> </article> <hr> <article> <h3> CVE-2025-5380 - Ashinigit XueShengZhuSu Image File Upload Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5380 <br> <strong>Published : </strong> May 31, 2025, 2:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file /upload/ of the component Image File Upload. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5380"> read more </a> </article> <hr> <article> <h3> CVE-2025-5378 - Astun Technology iShare Maps Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5378 <br> <strong>Published : </strong> May 31, 2025, 1:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5378"> read more </a> </article> <hr> <article> <h3> CVE-2025-5377 - "Astun Technology iShare Maps Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5377 <br> <strong>Published : </strong> May 31, 2025, 1:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5377"> read more </a> </article> <hr> <article> <h3> CVE-2025-4857 - WordPress Newsletters Plugin Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4857 <br> <strong>Published : </strong> May 31, 2025, 12:15 p.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4857"> read more </a> </article> <hr> <article> <h3> CVE-2025-5376 - SourceCodester Health Center Patient Record Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5376 <br> <strong>Published : </strong> May 31, 2025, 12:15 p.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5376"> read more </a> </article> <hr> <article> <h3> CVE-2025-4691 - "Free Booking Plugin for Hotels, Restaurants and Car Rentals - eaSYNC Booking Direct Object Reference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4691 <br> <strong>Published : </strong> May 31, 2025, 12:15 p.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'view_request_details' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view the details of any booking request. The vulnerability was partially patched in versions 1.3.18 and 1.3.21. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4691"> read more </a> </article> <hr> <article> <h3> CVE-2025-5375 - PHPGurukul HPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5375 <br> <strong>Published : </strong> May 31, 2025, 11:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5375"> read more </a> </article> <hr> <article> <h3> CVE-2025-5374 - PHPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5374 <br> <strong>Published : </strong> May 31, 2025, 10:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file /admin/all-applications.php. The manipulation of the argument del leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5374"> read more </a> </article> <hr> <article> <h3> CVE-2025-5373 - PHPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5373 <br> <strong>Published : </strong> May 31, 2025, 9:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5373"> read more </a> </article> <hr> <article> <h3> CVE-2025-3813 - WordPress Royal Elementor Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3813 <br> <strong>Published : </strong> May 31, 2025, 8:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_elementor_data’ parameter in all versions up to, and including, 1.7.1020 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3813"> read more </a> </article> <hr> <article> <h3> CVE-2025-5290 - Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5290 <br> <strong>Published : </strong> May 31, 2025, 8:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>The Borderless – Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5290"> read more </a> </article> <hr> <article> <h3> CVE-2025-5371 - SourceCodester Health Center Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5371 <br> <strong>Published : </strong> May 31, 2025, 8:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5371"> read more </a> </article> <hr> <article> <h3> CVE-2025-5285 - WooCommerce Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5285 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>The Product Subtitle for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmlTag’ parameter in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5285"> read more </a> </article> <hr> <article> <h3> CVE-2025-5292 - Elementor Element Pack Addons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5292 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>The Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content’ parameter in all versions up to, and including, 5.11.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5292"> read more </a> </article> <hr> <article> <h3> CVE-2025-4672 - Offsprout Page Builder WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4672 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 to 2.15.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to read, create, update or delete any user meta, including flipping their own wp_capabilities to administrator and fully escalate their privileges. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4672"> read more </a> </article> <hr> <article> <h3> CVE-2025-4607 - "PSW Front-end Login Registration WordPress Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4607 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 12 hours, 7 minutes ago <br> <strong>Description : </strong>The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() function. This makes it possible for unauthenticated attackers to initiate a password reset for any user, including administrators, and elevate their privileges for full site takeover. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4607"> read more </a> </article> <hr> <article> <h3> CVE-2025-4631 - WordPress Profitori Plugin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4631 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 12 hours, 7 minutes ago <br> <strong>Description : </strong>The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose '_datatype' is set to 'users',. This allows unauthenticated attackers to write arbitrary strings straight into the user’s wp_capabilities meta field, potentially elevating the privileges of an existing user account or a newly created one to that of an administrator. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4631"> read more </a> </article> <hr> <article> <h3> CVE-2025-4590 - Daisycon prijsvergelijkers WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4590 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 11 hours, 10 minutes ago <br> <strong>Description : </strong>The Daisycon prijsvergelijkers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'daisycon_uitvaart' shortcode in all versions up to, and including, 4.8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4590"> read more </a> </article> <hr> <article> <h3> CVE-2025-4595 - FastSpring for WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4595 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 11 hours, 10 minutes ago <br> <strong>Description : </strong>The FastSpring plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fastspring/block-fastspringblocks-complete-product-catalog' block in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping on the 'color' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4595"> read more </a> </article> <hr> <article> <h3> CVE-2025-4103 - WordPress WP-GeoMeta Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4103 <br> <strong>Published : </strong> May 31, 2025, 7:15 a.m. | 9 hours, 23 minutes ago <br> <strong>Description : </strong>The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_ajax_wpgm_start_geojson_import() function in versions 0.3.4 to 0.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4103"> read more </a> </article> <hr> <article> <h3> CVE-2025-5370 - PHPGurukul News Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5370 <br> <strong>Published : </strong> May 31, 2025, 6:15 a.m. | 10 hours, 23 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5370"> read more </a> </article> <hr> <article> <h3> CVE-2025-5369 - SourceCodester PHP Display Username After Login SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5369 <br> <strong>Published : </strong> May 31, 2025, 5:15 a.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5369"> read more </a> </article> <hr> <article> <h3> CVE-2025-5016 - Relevanssi WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5016 <br> <strong>Published : </strong> May 31, 2025, 4:15 a.m. | 10 hours, 59 minutes ago <br> <strong>Description : </strong>The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and including, 4.24.5 (Free) and 2.27.6 (Premium) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5016"> read more </a> </article> <hr> <article> <h3> CVE-2025-5368 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5368 <br> <strong>Published : </strong> May 31, 2025, 4:15 a.m. | 10 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5368"> read more </a> </article> <hr> <article> <h3> CVE-2025-5367 - "PHPGurukul Online Shopping Portal SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5367 <br> <strong>Published : </strong> May 31, 2025, 2:15 a.m. | 12 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5367"> read more </a> </article> <hr> <article> <h3> CVE-2025-5365 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5365 <br> <strong>Published : </strong> May 31, 2025, 1:15 a.m. | 13 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5365"> read more </a> </article> <hr> <article> <h3> CVE-2018-25111 - Django-Helpdesk Sensitive Data Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2018-25111 <br> <strong>Published : </strong> May 31, 2025, 1:15 a.m. | 12 hours, 10 minutes ago <br> <strong>Description : </strong>django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 31 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2018-25111"> read more </a> </article> <hr> <article> <h3> CVE-2025-5364 - Campcodes Online Hospital Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5364 <br> <strong>Published : </strong> May 30, 2025, 10:15 p.m. | 15 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5364"> read more </a> </article> <hr> <article> <h3> CVE-2025-5362 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5362 <br> <strong>Published : </strong> May 30, 2025, 9:15 p.m. | 14 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5362"> read more </a> </article> <hr> <article> <h3> CVE-2025-5363 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5363 <br> <strong>Published : </strong> May 30, 2025, 9:15 p.m. | 14 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5363"> read more </a> </article> <hr> <article> <h3> CVE-2025-5360 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5360 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 15 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5360"> read more </a> </article> <hr> <article> <h3> CVE-2025-5361 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5361 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 15 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5361"> read more </a> </article> <hr> <article> <h3> CVE-2025-48949 - Navidrome SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48949 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 14 hours, 9 minutes ago <br> <strong>Description : </strong>Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulnerability due to improper input validation on the `role` parameter within the API endpoint `/api/artist`. Attackers can exploit this flaw to inject arbitrary SQL queries, potentially gaining unauthorized access to the backend database and compromising sensitive user information. Version 0.56.0 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48949"> read more </a> </article> <hr> <article> <h3> CVE-2025-48948 - Navidrome Unauthorized Transcoding Configuration </h3> <p> <strong>CVE ID : </strong>CVE-2025-48948 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 13 hours, 9 minutes ago <br> <strong>Description : </strong>Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting transcoding settings. In the threat model where administrators are trusted but regular users are not, this vulnerability represents a significant security risk when transcoding is enabled. Version 0.56.0 patches the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48948"> read more </a> </article> <hr> <article> <h3> CVE-2025-1479 - Legion Space Debug Interface Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1479 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a local attacker to execute arbitrary code. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1479"> read more </a> </article> <hr> <article> <h3> CVE-2025-2501 - Lenovo PC Manager Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2501 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2501"> read more </a> </article> <hr> <article> <h3> CVE-2025-2502 - Lenovo PC Manager Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-2502 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2502"> read more </a> </article> <hr> <article> <h3> CVE-2025-2503 - Lenovo PC Manager Permission Bypass File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2503 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2503"> read more </a> </article> <hr> <article> <h3> CVE-2025-48870 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48870 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47057. Reason: This candidate is a duplicate of CVE-2024-47057. Notes: All CVE users should reference CVE-2024-47057 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48870"> read more </a> </article> <hr> <article> <h3> CVE-2025-48871 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48871 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47056. Reason: This candidate is a duplicate of CVE-2024-47056. Notes: All CVE users should reference CVE-2024-47056 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48871"> read more </a> </article> <hr> <article> <h3> CVE-2025-48872 - Apache DoS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48872 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-47055. Reason: This candidate is a duplicate of CVE-2024-47055. Notes: All CVE users should reference CVE-2024-47055 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48872"> read more </a> </article> <hr> <article> <h3> CVE-2025-48873 - Apache Web Framework Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48873 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-5256. Reason: This candidate is a duplicate of CVE-2025-5256. Notes: All CVE users should reference CVE-2025-5256 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48873"> read more </a> </article> <hr> <article> <h3> CVE-2025-48874 - Apache HTTP Server Insecure Deserialization </h3> <p> <strong>CVE ID : </strong>CVE-2025-48874 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-5257. Reason: This candidate is a duplicate of CVE-2025-5257. Notes: All CVE users should reference CVE-2025-5257 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48874"> read more </a> </article> <hr> <article> <h3> CVE-2025-48882 - PHPOffice Math XML External Entity (XXE) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48882 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48882"> read more </a> </article> <hr> <article> <h3> CVE-2025-48946 - Liboqs HQC Algorithmic Design Flaw Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48946 <br> <strong>Published : </strong> May 30, 2025, 8:15 p.m. | 11 hours, 9 minutes ago <br> <strong>Description : </strong>liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the HQC algorithm, an algorithm with a theoretical design flaw which leads to large numbers of malformed ciphertexts sharing the same implicit rejection value. Currently, no concrete attack on the algorithm is known. However, prospective users of HQC must take extra care when using the algorithm in protocols involving key derivation. In particular, HQC does not provide the same security guarantees as Kyber or ML-KEM. There is currently no patch for the HQC flaw available in liboqs, so HQC is disabled by default in liboqs starting from version 0.13.0. OQS will update its implementation after the HQC team releases an updated algorithm specification. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48946"> read more </a> </article> <hr> <article> <h3> CVE-2025-5359 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5359 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 11 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5359"> read more </a> </article> <hr> <article> <h3> CVE-2025-48944 - vLLM Unvalidated Input Crash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48944 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 9 hours, 22 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models (LLMs). In version 0.8.0 up to but excluding 0.9.0, the vLLM backend used with the /v1/chat/completions OpenAPI endpoint fails to validate unexpected or malformed input in the "pattern" and "type" fields when the tools functionality is invoked. These inputs are not validated before being compiled or parsed, causing a crash of the inference worker with a single request. The worker will remain down until it is restarted. Version 0.9.0 fixes the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48944"> read more </a> </article> <hr> <article> <h3> CVE-2025-48942 - vLLM JSON Schema Deserialization Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-48942 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 9 hours, 9 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models (LLMs). In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid json_schema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex instead of a JSON schema. Version 0.9.0 fixes the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48942"> read more </a> </article> <hr> <article> <h3> CVE-2025-48943 - Apache vLLM Regex Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48943 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 9 hours, 9 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but for regex instead of a JSON schema. Version 0.9.0 fixes the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48943"> read more </a> </article> <hr> <article> <h3> CVE-2025-48883 - Chrome CSS Selector XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48883 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 5 hours, 49 minutes ago <br> <strong>Description : </strong>Chrome PHP allows users to start playing with chrome/chromium in headless mode from PHP. Prior to version 1.14.0, CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities. This is patched in v1.14.0. As a workaround, users can apply encoding manually to their selectors if they are unable to upgrade. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48883"> read more </a> </article> <hr> <article> <h3> CVE-2025-48885 - XWiki URL Shortener Unauthenticated Page Creation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48885 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 5 hours, 49 minutes ago <br> <strong>Description : </strong>application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with view access being able to create arbitrary pages. Any user (even guests) can create these docs, even if they don't exist already. This can enable guest users to denature the structure of wiki pages, by creating 1000's of pages with random name, that then become very difficult to handle by admins. Version 1.2.4 fixes the issue. No known workarounds are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48885"> read more </a> </article> <hr> <article> <h3> CVE-2025-48938 - GitHub go-gh Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48938 <br> <strong>Published : </strong> May 30, 2025, 7:15 p.m. | 5 hours, 49 minutes ago <br> <strong>Description : </strong>go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing. In `2.12.1`, `Browser.Browse()` has been enhanced to allow and disallow a variety of scenarios to avoid opening or executing files on the filesystem without unduly impacting HTTP URLs. No known workarounds are available other than upgrading. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48938"> read more </a> </article> <hr> <article> <h3> CVE-2025-5358 - "PHPGurukul/Campcodes Cyber Cafe Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5358 <br> <strong>Published : </strong> May 30, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5358"> read more </a> </article> <hr> <article> <h3> CVE-2023-26226 - Yandex Browser for Desktop Use-After-Free Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-26226 <br> <strong>Published : </strong> May 30, 2025, 6:15 p.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-26226"> read more </a> </article> <hr> <article> <h3> CVE-2025-48887 - OpenAI vLLM Regular Expression Denial of Service (ReDoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48887 <br> <strong>Published : </strong> May 30, 2025, 6:15 p.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>vLLM, an inference and serving engine for large language models (LLMs), has a Regular Expression Denial of Service (ReDoS) vulnerability in the file `vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py` of versions 0.6.4 up to but excluding 0.9.0. The root cause is the use of a highly complex and nested regular expression for tool call detection, which can be exploited by an attacker to cause severe performance degradation or make the service unavailable. The pattern contains multiple nested quantifiers, optional groups, and inner repetitions which make it vulnerable to catastrophic backtracking. Version 0.9.0 contains a patch for the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48887"> read more </a> </article> <hr> <article> <h3> CVE-2025-5054 - Canonical Apport Container Sensitive Information Leak Race Condition </h3> <p> <strong>CVE ID : </strong>CVE-2025-5054 <br> <strong>Published : </strong> May 30, 2025, 6:15 p.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `consistency_checks`, which attempts to detect if the crashing process had been replaced. Because of this, if a process crashed and was quickly replaced with a containerized one, apport could be made to forward the core dump to the container, potentially leaking sensitive information. `consistency_checks` is now being called before `_check_global_pid_and_forward`. Additionally, given that the PID-reuse race condition cannot be reliably detected from userspace alone, crashes are only forwarded to containers if the kernel provided a pidfd, or if the crashing process was unprivileged (i.e., if dump mode == 1). <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5054"> read more </a> </article> <hr> <article> <h3> CVE-2025-5357 - FreeFloat FTP Server PWD Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5357 <br> <strong>Published : </strong> May 30, 2025, 6:15 p.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component PWD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5357"> read more </a> </article> <hr> <article> <h3> CVE-2025-5356 - FreeFloat FTP Server BYE Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5356 <br> <strong>Published : </strong> May 30, 2025, 5:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component BYE Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5356"> read more </a> </article> <hr> <article> <h3> CVE-2024-13915 - Ulefone and KrügerMatz Android Smartphones Factory Reset Service Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13915 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process. The application "com.pri.factorytest" (version name: 1.0, version code: 1) exposes a ”com.pri.factorytest.emmc.FactoryResetService“ service allowing any application to perform a factory reset of the device. Application update did not increment the APK version. Instead, it was bundled in OS builds released later than December 2024 (Ulefone) and most probably March 2025 (Krüger&Matz, although the vendor has not confirmed it, so newer releases might be vulnerable as well). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13915"> read more </a> </article> <hr> <article> <h3> CVE-2024-13916 - KrugerMatz com.pri.applock Fingerprint PIN Code Exfiltration </h3> <p> <strong>CVE ID : </strong>CVE-2024-13916 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content provider's public method query() allows any other malicious application, without any granted Android system permissions, to exfiltrate the PIN code. Vendor did not provide information about vulnerable versions. Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13916"> read more </a> </article> <hr> <article> <h3> CVE-2024-13917 - KrugerMatz Applock System Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13917 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting CVE-2024-13916) or ask the user to provide it. Vendor did not provide information about vulnerable versions. Only version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13917"> read more </a> </article> <hr> <article> <h3> CVE-2024-23589 - HCL Glovius Cloud Hash Algorithm Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-23589 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks efficiently using modern hardware such as GPUs or ASICs <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-23589"> read more </a> </article> <hr> <article> <h3> CVE-2024-42190 - HCL Traveler for Microsoft Outlook DLL Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42190 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42190"> read more </a> </article> <hr> <article> <h3> CVE-2024-42191 - HCL Traveler for Microsoft Outlook COM Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42191 <br> <strong>Published : </strong> May 30, 2025, 4:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42191"> read more </a> </article> <hr> <article> <h3> CVE-2025-4986 - "3DEXPERIENCE Product Manager Stored XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4986 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4986"> read more </a> </article> <hr> <article> <h3> CVE-2025-4988 - "3DEXPERIENCE Stored XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4988 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4988"> read more </a> </article> <hr> <article> <h3> CVE-2025-4989 - "Product Manager 3DEXPERIENCE Stored XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4989 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4989"> read more </a> </article> <hr> <article> <h3> CVE-2025-4990 - "3DEXPERIENCE Product Manager Stored XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4990 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4990"> read more </a> </article> <hr> <article> <h3> CVE-2025-4991 - "3DEXPERIENCE Collaborative Industry Innovator Stored XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4991 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4991"> read more </a> </article> <hr> <article> <h3> CVE-2025-4992 - "Service Process Engineer XSS Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4992 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4992"> read more </a> </article> <hr> <article> <h3> CVE-2025-1792 - Mattermost Guest Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1792 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing authenticated guest users to view metadata about members of public channels via the channel members API endpoint. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1792"> read more </a> </article> <hr> <article> <h3> CVE-2025-2571 - Mattermost Google OAuth Credential Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2571 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2571"> read more </a> </article> <hr> <article> <h3> CVE-2025-3230 - Mattermost Unvalidated Personal Access Token Deactivation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3230 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3230"> read more </a> </article> <hr> <article> <h3> CVE-2025-3611 - Mattermost System Manager Access Control Enforcement Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3611 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team endpoints, even when explicitly configured with 'No access' to Teams in the System Console. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3611"> read more </a> </article> <hr> <article> <h3> CVE-2025-4983 - City Referential Manager 3DEXPERIENCE XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-4983 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4983"> read more </a> </article> <hr> <article> <h3> CVE-2025-4984 - City Discover City Referential Manager Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-4984 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting City Discover in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4984"> read more </a> </article> <hr> <article> <h3> CVE-2025-4985 - "3DEXPERIENCE Project Portfolio Manager Stored XSS Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4985 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4985"> read more </a> </article> <hr> <article> <h3> CVE-2024-7096 - WSO2 SOAP Admin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-7096 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A privilege escalation vulnerability exists in multiple [Vendor Name] products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: * SOAP admin services are accessible to the attacker. * The deployment includes an internally used attribute that is not part of the default WSO2 product configuration. * At least one custom role exists with non-default permissions. * The attacker has knowledge of the custom role and the internal attribute used in the deployment. Exploiting this vulnerability allows malicious actors to assign higher privileges to self-registered users, bypassing intended access control mechanisms. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7096"> read more </a> </article> <hr> <article> <h3> CVE-2024-7097 - WSO2 SOAP Admin Service Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-7097 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which allows user account creation regardless of the self-registration configuration settings. This vulnerability enables malicious actors to create new user accounts without proper authorization. Exploitation of this flaw could allow an attacker to create multiple low-privileged user accounts, gaining unauthorized access to the system. Additionally, continuous exploitation could lead to system resource exhaustion through mass user creation. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7097"> read more </a> </article> <hr> <article> <h3> CVE-2025-0602 - "SolidWorks Collaborative Industry Innovator Stored XSS Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-0602 <br> <strong>Published : </strong> May 30, 2025, 3:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0602"> read more </a> </article> <hr> <article> <h3> CVE-2025-48331 - Vanquish WooCommerce Orders Customers Exporter Sensitive Data Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48331 <br> <strong>Published : </strong> May 30, 2025, 2:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Insertion of Sensitive Information Into Sent Data vulnerability in Vanquish WooCommerce Orders & Customers Exporter allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Orders & Customers Exporter: from n/a through 5.0. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48331"> read more </a> </article> <hr> <article> <h3> CVE-2025-4598 - Systemd-coredump SUID Process Core Dump File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4598 <br> <strong>Published : </strong> May 30, 2025, 2:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process. A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4598"> read more </a> </article> <hr> <article> <h3> CVE-2025-4433 - Devolutions Server Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4433 <br> <strong>Published : </strong> May 30, 2025, 1:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Management" permissions to perform privilege escalation by adding users to groups with administrative privileges. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4433"> read more </a> </article> <hr> <article> <h3> CVE-2025-1484 - Adobe Asset Suite Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-1484 <br> <strong>Published : </strong> May 30, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability exists in the media upload component of the Asset Suite versions listed below. If successfully exploited an attacker could impact the confidentiality or integrity of the system. An attacker can use this vulnerability to construct a request that will cause JavaScript code supplied by the attacker to execute within the user’s browser in the context of that user’s session with the application. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1484"> read more </a> </article> <hr> <article> <h3> CVE-2025-2500 - Oracle Asset Suite SOAP Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2500 <br> <strong>Published : </strong> May 30, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2500"> read more </a> </article> <hr> <article> <h3> CVE-2025-40909 - "Perl threads Directory Handle Race Condition Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40909 <br> <strong>Published : </strong> May 30, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40909"> read more </a> </article> <hr> <article> <h3> CVE-2025-4597 - Woo Slider Pro WordPress Unauthorized Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4597 <br> <strong>Published : </strong> May 30, 2025, 12:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woo_slide_pro_delete_draft_preview AJAX action in all versions up to, and including, 1.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4597"> read more </a> </article> <hr> <article> <h3> CVE-2025-4944 - LA-Studio Element Kit for Elementor WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4944 <br> <strong>Published : </strong> May 30, 2025, 12:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Compare and Google Maps widgets in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4944"> read more </a> </article> <hr> <article> <h3> CVE-2025-5190 - WordPress Browse As Plugin Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5190 <br> <strong>Published : </strong> May 30, 2025, 12:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The Browse As plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.2. This is due to incorrect authentication checking in the 'IS_BA_Browse_As::notice' function with the 'is_ba_original_user_COOKIEHASH' cookie value. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator, if they have access to the user id. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5190"> read more </a> </article> <hr> <article> <h3> CVE-2025-1763 - GitLab EE Cross-Site Scripting and Content Security Policy Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1763 <br> <strong>Published : </strong> May 30, 2025, 11:15 a.m. | 3 hours, 49 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1763"> read more </a> </article> <hr> <article> <h3> CVE-2025-5142 - WordPress Simple Page Access Restriction CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5142 <br> <strong>Published : </strong> May 30, 2025, 10:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31. This is due to missing nonce validation and capability checks in the settings save handler in the settings.php script. This makes it possible for unauthenticated attackers to (1) enable or disable access protection on all post types or taxonomies, (2) force every new page/post to be public or private, regardless of meta-box settings, (3) cause a silent wipe of all plugin data when it’s later removed, or (4) to conduct URL redirection attacks via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5142"> read more </a> </article> <hr> <article> <h3> CVE-2025-5235 - OpenSheetMusicDisplay for WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5235 <br> <strong>Published : </strong> May 30, 2025, 10:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>The OpenSheetMusicDisplay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5235"> read more </a> </article> <hr> <article> <h3> CVE-2025-48334 - BinaryCarpenter Woo Slider Pro Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48334 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "woo_slide_pro_delete_slider". <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48334"> read more </a> </article> <hr> <article> <h3> CVE-2025-48912 - Apache Superset SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48912 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects Apache Superset: before 4.1.2. Users are recommended to upgrade to version 4.1.2, which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48912"> read more </a> </article> <hr> <article> <h3> CVE-2025-4633 - Airpointer Default Credentials Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4633 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4633"> read more </a> </article> <hr> <article> <h3> CVE-2025-4634 - Airpointer Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4634 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4634"> read more </a> </article> <hr> <article> <h3> CVE-2025-4635 - Apache Web Portal Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4635 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4635"> read more </a> </article> <hr> <article> <h3> CVE-2025-4636 - Apache Airpointer Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4636 <br> <strong>Published : </strong> May 30, 2025, 9:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4636"> read more </a> </article> <hr> <article> <h3> CVE-2025-4431 - Unsplash WordPress Plugin Missing Capability Check Allows Unauthorized Data Modification </h3> <p> <strong>CVE ID : </strong>CVE-2025-4431 <br> <strong>Published : </strong> May 30, 2025, 8:15 a.m. | 6 hours, 49 minutes ago <br> <strong>Description : </strong>The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fip_save_attach_featured function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update featured image of any post. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4431"> read more </a> </article> <hr> <article> <h3> CVE-2025-5236 - NinjaTeam Chat for Telegram WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5236 <br> <strong>Published : </strong> May 30, 2025, 8:15 a.m. | 6 hours, 49 minutes ago <br> <strong>Description : </strong>The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5236"> read more </a> </article> <hr> <article> <h3> CVE-2025-48865 - Fabio HTTP Hop-by-Hop Header Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48865 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should trust these headers, allowing HTTP clients to remove or modify them creates potential security vulnerabilities. Some of these custom headers can be removed and, in certain cases, manipulated. The attack relies on the behavior that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been patched in version 1.6.6. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48865"> read more </a> </article> <hr> <article> <h3> CVE-2025-48875 - FreeScout Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48875 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, the system's incorrect validation of last_name and first_name during profile data updates allows for the injection of arbitrary JavaScript code, which will be executed in a flesh-message when the data is deleted, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.181. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48875"> read more </a> </article> <hr> <article> <h3> CVE-2025-48880 - FreeScout Race Condition Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48880 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is the the possibility of a race condition occurring. This issue has been patched in version 1.8.181. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48880"> read more </a> </article> <hr> <article> <h3> CVE-2025-48936 - Zitadel Host Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48936 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>Zitadel is open-source identity infrastructure software. Prior to versions 2.70.12, 2.71.10, and 3.2.2, a potential vulnerability exists in the password reset mechanism. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests to construct the URL for the password reset confirmation link. This link, containing a secret code, is then emailed to the user. If an attacker can manipulate these headers (e.g., via host header injection), they could cause ZITADEL to generate a password reset link pointing to a malicious domain controlled by the attacker. If the user clicks this manipulated link in the email, the secret reset code embedded in the URL can be captured by the attacker. This captured code could then be used to reset the user's password and gain unauthorized access to their account. This specific attack vector is mitigated for accounts that have Multi-Factor Authentication (MFA) or Passwordless authentication enabled. This issue has been patched in versions 2.70.12, 2.71.10, and 3.2.2. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48936"> read more </a> </article> <hr> <article> <h3> CVE-2025-4943 - LA-Studio Element Kit for Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4943 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4943"> read more </a> </article> <hr> <article> <h3> CVE-2025-48489 - FreeScout Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48489 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to insufficient data validation and sanitization during data reception. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48489"> read more </a> </article> <hr> <article> <h3> CVE-2025-48492 - GetSimple CMS Remote Code Execution (RCE) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48492 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution (RCE). This issue is set to be patched in version 3.3.22. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48492"> read more </a> </article> <hr> <article> <h3> CVE-2025-48485 - FreeScout Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48485 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data when an authenticated user updates the profile of an arbitrary customer. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48485"> read more </a> </article> <hr> <article> <h3> CVE-2025-48486 - FreeScout Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48486 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the cross-site scripiting (XSS) vulnerability is caused by the lack of input validation and sanitization in both \Session::flash and __, allowing user input to be executed without proper filtering. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48486"> read more </a> </article> <hr> <article> <h3> CVE-2025-48487 - FreeScout Flash Message Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48487 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when creating a translation of a phrase that appears in a flash-message after a completed action, it is possible to inject a payload to exploit XSS vulnerability. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48487"> read more </a> </article> <hr> <article> <h3> CVE-2025-48488 - FreeScout Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48488 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an HTML file containing malicious JavaScript code to the server, which can result in a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48488"> read more </a> </article> <hr> <article> <h3> CVE-2025-41385 - "Wivia OS Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-41385 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>An OS Command Injection issue exists in wivia 5 all versions. If this vulnerability is exploited, an arbitrary OS command may be executed by a logged-in administrative user. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41385"> read more </a> </article> <hr> <article> <h3> CVE-2025-41406 - Wivia XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-41406 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>Cross-site scripting vulnerability exists in wivia 5 all versions. If exploited, when a user connects to the affected device with a specific operation, an arbitrary script may be executed on the web browser of the moderator user. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41406"> read more </a> </article> <hr> <article> <h3> CVE-2025-47697 - Wivia Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47697 <br> <strong>Published : </strong> May 30, 2025, 7:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated attacker may bypass authentication and operate the affected device as the moderator user. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47697"> read more </a> </article> <hr> <article> <h3> CVE-2025-5259 - WordPress Minimal Share Buttons Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-5259 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 4 hours, 22 minutes ago <br> <strong>Description : </strong>The Minimal Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5259"> read more </a> </article> <hr> <article> <h3> CVE-2025-4429 - "Gearside Developer Dashboard WordPress Plugin Reflected Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4429 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The Gearside Developer Dashboard WordPress plugin through 1.0.72 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4429"> read more </a> </article> <hr> <article> <h3> CVE-2025-4659 - Salesforce WordPress Plugin Full Path Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4659 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4659"> read more </a> </article> <hr> <article> <h3> CVE-2025-41235 - Spring Cloud Gateway Server Untrusted Proxy Header Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41235 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41235"> read more </a> </article> <hr> <article> <h3> CVE-2025-48490 - Laravel Rest Api Validation Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48490 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Laravel Rest Api is an API generator. Prior to version 2.13.0, a validation bypass vulnerability was discovered where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validation rules across multiple contexts (such as index, store, and update actions), malicious actors could exploit this behavior by crafting requests that bypass expected validation rules, potentially injecting unexpected or dangerous parameters into the application. This could lead to unauthorized data being accepted or processed by the API, depending on the context in which the validation was bypassed. This issue has been patched in version 2.13.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48490"> read more </a> </article> <hr> <article> <h3> CVE-2025-48881 - Valtimo Object Management Configuration Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48881 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If object-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management configurations. At time of publication, no known patches exist. A workaround for this issue involves overriding the endpoint security as defined in ObjectenApiHttpSecurityConfigurer and ObjectManagementHttpSecurityConfigurer. Depending on the implementation, this could result in loss of functionality. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48881"> read more </a> </article> <hr> <article> <h3> CVE-2025-48889 - Gradio File Copy Vulnerability (Arbitrary File Copy DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48889 <br> <strong>Published : </strong> May 30, 2025, 6:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48889"> read more </a> </article> <hr> <article> <h3> CVE-2025-48481 - FreeScout Account Self-Activation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48481 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing invite_hash, can exploit this vulnerability to self-activate their account, despite it being blocked or deleted, by leveraging the invitation link from the email to gain initial access to the account. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48481"> read more </a> </article> <hr> <article> <h3> CVE-2025-48482 - FreeScout Mass Assignment Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48482 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, there is a mass assignment vulnerability. The Customer object is updated using the fill() method, which processes fields such as channel and channel_id. However, the fill() method is called with all client-provided data, including unexpected values for channel and channel_id, leading to a mass assignment vulnerability. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48482"> read more </a> </article> <hr> <article> <h3> CVE-2025-48483 - FreeScout Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48483 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data during mail signature sanitization. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive data, hijack user sessions, or conduct other malicious activities. Additionally, if an administrator accesses one of these emails with a modified signature, it could result in a subsequent Cross-Site Request Forgery (CSRF) vulnerability. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48483"> read more </a> </article> <hr> <article> <h3> CVE-2025-48484 - FreeScout Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48484 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. This issue has been patched in version 1.8.178. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48484"> read more </a> </article> <hr> <article> <h3> CVE-2025-48476 - FreeScout Password Change Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48476 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill() method, there is no check for the absence of the password field in the data coming from the user, which leads to a mass-assignment vulnerability. As a result, a user with the right to edit other users of the system can change their password, and then log in to the system using the set password. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48476"> read more </a> </article> <hr> <article> <h3> CVE-2025-48477 - FreeScout Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48477 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correct sequence of actions to implement a functional capability, but the application allows access to the functional capability without correctly completing one or more actions in the sequence. The leaves the attributes of Mailbox object able to be changed by the fill method. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48477"> read more </a> </article> <hr> <article> <h3> CVE-2025-48478 - FreeScout Mass Assignment Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48478 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, insufficient input validation during user creation has resulted in a mass assignment vulnerability, allowing an attacker to manipulate all fields of the object, which are enumerated in the $fillable array (the User object), when creating a new user. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48478"> read more </a> </article> <hr> <article> <h3> CVE-2025-48479 - FreeScout Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48479 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any directory, given sufficient access rights. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48479"> read more </a> </article> <hr> <article> <h3> CVE-2025-48480 - FreeScout HTAccess File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48480 <br> <strong>Published : </strong> May 30, 2025, 5:15 a.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an authorized user with the administrator role or with the privilege User::PERM_EDIT_USERS can create a user, specifying the path to the user's avatar ../.htaccess during creation, and then delete the user's avatar, resulting in the deletion of the file .htaccess in the folder /storage/app/public. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48480"> read more </a> </article> <hr> <article> <h3> CVE-2025-44904 - Apache HDF5 Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-44904 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44904"> read more </a> </article> <hr> <article> <h3> CVE-2025-44905 - HDF5 Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-44905 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44905"> read more </a> </article> <hr> <article> <h3> CVE-2025-44906 - jhead Heap Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44906 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44906"> read more </a> </article> <hr> <article> <h3> CVE-2025-47952 - Traefik Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47952 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target a backend, exposed using another router, by-passing the middlewares chain. This issue has been patched in versions 2.11.25 and 3.4.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47952"> read more </a> </article> <hr> <article> <h3> CVE-2025-48068 - Next.js App Router Local Source Code Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48068 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 9 minutes ago <br> <strong>Description : </strong>Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enabled. The vulnerability only affects local development environments and requires the user to visit a malicious webpage while npm run dev is active. This issue has been patched in version 15.2.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48068"> read more </a> </article> <hr> <article> <h3> CVE-2025-48381 - CVAT Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48381 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. In versions starting from 2.4.0 to before 2.38.0, an authenticated CVAT user may be able to retrieve the IDs and names of all tasks, projects, labels, and the IDs of all jobs and quality reports on the CVAT instance. In addition, if the instance contains many resources of a particular type, retrieving this information may tie up system resources, denying access to legitimate users. This issue has been patched in version 2.38.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48381"> read more </a> </article> <hr> <article> <h3> CVE-2025-48491 - Project AI Exposed Hardcoded API Key Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48491 <br> <strong>Published : </strong> May 30, 2025, 4:15 a.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48491"> read more </a> </article> <hr> <article> <h3> CVE-2025-44612 - Tinxy WiFi Lock Controller Remote Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-44612 <br> <strong>Published : </strong> May 30, 2025, 3:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44612"> read more </a> </article> <hr> <article> <h3> CVE-2025-44614 - Tinxy WiFi Lock Controller Plaintext Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44614 <br> <strong>Published : </strong> May 30, 2025, 3:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44614"> read more </a> </article> <hr> <article> <h3> CVE-2025-44619 - Tinxy WiFi Lock Controller RF Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-44619 <br> <strong>Published : </strong> May 30, 2025, 3:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44619"> read more </a> </article> <hr> <article> <h3> CVE-2025-48757 - Lovable Database Row-Level Security Bypass (Remote Unauthenticated) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48757 <br> <strong>Published : </strong> May 30, 2025, 3:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48757"> read more </a> </article> <hr> <article> <h3> CVE-2024-12224 - Servo rust-url IDNA Punycode Equivalence Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12224 <br> <strong>Published : </strong> May 30, 2025, 2:15 a.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12224"> read more </a> </article> <hr> <article> <h3> CVE-2020-36846 - Brotli Embedded Library Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2020-36846 <br> <strong>Published : </strong> May 30, 2025, 1:15 a.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2020-36846"> read more </a> </article> <hr> <article> <h3> CVE-2025-1907 - Instantel Micromate Unauthenticated Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-1907 <br> <strong>Published : </strong> May 30, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1907"> read more </a> </article> <hr> <article> <h3> CVE-2025-41438 - "CS5000 Fire Panel Default Account Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-41438 <br> <strong>Published : </strong> May 30, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's operation if exploited. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41438"> read more </a> </article> <hr> <article> <h3> CVE-2025-46352 - "CS5000 Fire Panel Hard-Coded Password Remote Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46352 <br> <strong>Published : </strong> May 30, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>The CS5000 Fire Panel is vulnerable due to a hard-coded password that runs on a VNC server and is visible as a string in the binary responsible for running VNC. This password cannot be altered, allowing anyone with knowledge of it to gain remote access to the panel. Such access could enable an attacker to operate the panel remotely, potentially putting the fire panel into a non-functional state and causing serious safety issues. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 30 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46352"> read more </a> </article> <hr> <article> <h3> CVE-2025-5332 - "1000 Projects Online Notice Board SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5332 <br> <strong>Published : </strong> May 29, 2025, 11:15 p.m. | 5 hours, 22 minutes ago <br> <strong>Description : </strong>A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5332"> read more </a> </article> <hr> <article> <h3> CVE-2025-31199 - "Apple iOS/iPadOS/visualOS/macOS Sequoia Sensitive Data Disclosure" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31199 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31199"> read more </a> </article> <hr> <article> <h3> CVE-2025-31231 - Apple macOS Sequoia Location Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31231 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read sensitive location information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31231"> read more </a> </article> <hr> <article> <h3> CVE-2025-31261 - Apple macOS User Data Access Permissions Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31261 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31261"> read more </a> </article> <hr> <article> <h3> CVE-2025-31263 - Apple macOS Coprocessor Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-31263 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31263"> read more </a> </article> <hr> <article> <h3> CVE-2025-31264 - Apple macOS Locked Device State Management Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-31264 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with physical access to a locked device may be able to view sensitive user information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31264"> read more </a> </article> <hr> <article> <h3> CVE-2025-5307 - Santesoft Sante DICOM Viewer Pro RCE Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-5307 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5307"> read more </a> </article> <hr> <article> <h3> CVE-2025-5330 - FreeFloat FTP Server RETR Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5330 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component RETR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5330"> read more </a> </article> <hr> <article> <h3> CVE-2025-5331 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5331 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5331"> read more </a> </article> <hr> <article> <h3> CVE-2025-30466 - "Safari Same Origin Policy Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-30466 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. A website may be able to bypass Same Origin Policy. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30466"> read more </a> </article> <hr> <article> <h3> CVE-2025-31189 - Apple macOS Sandbox Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-31189 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31189"> read more </a> </article> <hr> <article> <h3> CVE-2025-31198 - Apple macOS Symlink Path Handling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31198 <br> <strong>Published : </strong> May 29, 2025, 10:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A path handling issue was addressed with improved validation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31198"> read more </a> </article> <hr> <article> <h3> CVE-2025-5327 - "Chshcms MCCMS Gf.php Server-Side Request Forgery Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5327 <br> <strong>Published : </strong> May 29, 2025, 9:15 p.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5327"> read more </a> </article> <hr> <article> <h3> CVE-2025-5328 - "Chshcms McCms Remote Path Traversal Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5328 <br> <strong>Published : </strong> May 29, 2025, 9:15 p.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This vulnerability affects the function restore_del of the file /sys/apps/controllers/admin/Backups.php. The manipulation of the argument dirs leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5328"> read more </a> </article> <hr> <article> <h3> CVE-2025-3050 - IBM Db2 CPU Resource Allocation Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-3050 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3050"> read more </a> </article> <hr> <article> <h3> CVE-2025-47288 - Discourse Policy Plugin Group Policy Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47288 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>Discourse Policy plugin gives the ability to confirm users have seen or done something. Prior to version 0.1.1, if there was a policy posted to a public topic that was tied to a private group then the group members could be shown to non-group members. This issue has been patched in version 0.1.1. A workaround involves moving any policy topics with private groups to restricted categories. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47288"> read more </a> </article> <hr> <article> <h3> CVE-2025-47933 - Argo CD Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47933 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with permission to edit the repository. This issue has been patched in versions 2.13.8, 2.14.13, and 3.0.4. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47933"> read more </a> </article> <hr> <article> <h3> CVE-2025-4967 - Esri Portal for ArcGIS SSRF Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4967 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4967"> read more </a> </article> <hr> <article> <h3> CVE-2025-5325 - Zhilink ADP Application Developer Platform Template Engine Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5325 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adpweb/a/ica/api/service/rfa/testService. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5325"> read more </a> </article> <hr> <article> <h3> CVE-2025-5326 - Zhilink ADP Application Developer Platform Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5326 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adpweb/wechat/verifyToken/. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5326"> read more </a> </article> <hr> <article> <h3> CVE-2024-49350 - IBM Db2 Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49350 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49350"> read more </a> </article> <hr> <article> <h3> CVE-2024-54952 - MikroTik RouterOS SMB Service Remote Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-54952 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54952"> read more </a> </article> <hr> <article> <h3> CVE-2025-2518 - IBM Db2 Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2518 <br> <strong>Published : </strong> May 29, 2025, 8:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2518"> read more </a> </article> <hr> <article> <h3> CVE-2025-48336 - ThimPress Course Builder Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48336 <br> <strong>Published : </strong> May 29, 2025, 7:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in ThimPress Course Builder allows Object Injection.This issue affects Course Builder: from n/a before 3.6.6. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48336"> read more </a> </article> <hr> <article> <h3> CVE-2025-5324 - TechPowerUp GPU-Z IOCTL Handler Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5324 <br> <strong>Published : </strong> May 29, 2025, 7:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in TechPowerUp GPU-Z 2.23.0. Affected is the function sub_140001880 in the library GPU-Z.sys of the component 0x8000645C IOCTL Handler. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5324"> read more </a> </article> <hr> <article> <h3> CVE-2025-32752 - Dell ThinOS Cleartext Storage of Sensitive Information Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32752 <br> <strong>Published : </strong> May 29, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. A high privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32752"> read more </a> </article> <hr> <article> <h3> CVE-2025-46701 - Apache Tomcat GCI Servlet Case Sensitivity Security Constraint Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46701 <br> <strong>Published : </strong> May 29, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46701"> read more </a> </article> <hr> <article> <h3> CVE-2023-41591 - ONOS ARP Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-41591 <br> <strong>Published : </strong> May 29, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-41591"> read more </a> </article> <hr> <article> <h3> CVE-2024-53423 - ONOS Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53423 <br> <strong>Published : </strong> May 29, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53423"> read more </a> </article> <hr> <article> <h3> CVE-2025-29632 - Free5gc Buffer Overflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-29632 <br> <strong>Published : </strong> May 29, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29632"> read more </a> </article> <hr> <article> <h3> CVE-2025-46823 - OpenMRS FHIR2 Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46823 <br> <strong>Published : </strong> May 29, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>openmrs-module-fhir2 provides the FHIR REST API and related services for OpenMRS, an open medical records system. In versions of the FHIR2 module prior to 2.5.0, privileges were not always correctly checked, which means that unauthorized users may have been able to add or edit data they were not supposed to be able to. All implementers should update to FHIR2 2.5.0 or newer as soon as is feasible to receive a patch. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46823"> read more </a> </article> <hr> <article> <h3> CVE-2025-5323 - Fossasia Open-Event-Server Encryption Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5323 <br> <strong>Published : </strong> May 29, 2025, 6:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function send_email_change_user_email of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The manipulation leads to reliance on obfuscation or encryption of security-relevant inputs without integrity checking. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5323"> read more </a> </article> <hr> <article> <h3> CVE-2024-51392 - OpenKnowledgeMaps Headstart Remote Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-51392 <br> <strong>Published : </strong> May 29, 2025, 5:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the getPDF.php component <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51392"> read more </a> </article> <hr> <article> <h3> CVE-2025-46570 - Apache vLLM PageAttention Chunk Prefill Timing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46570 <br> <strong>Published : </strong> May 29, 2025, 5:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.9.0, when a new prompt is processed, if the PageAttention mechanism finds a matching prefix chunk, the prefill process speeds up, which is reflected in the TTFT (Time to First Token). These timing differences caused by matching chunks are significant enough to be recognized and exploited. This issue has been patched in version 0.9.0. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46570"> read more </a> </article> <hr> <article> <h3> CVE-2025-46722 - VLLM Image Hash Collision Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46722 <br> <strong>Published : </strong> May 29, 2025, 5:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.0, in the file vllm/multimodal/hasher.py, the MultiModalHasher class has a security and data integrity issue in its image hashing method. Currently, it serializes PIL.Image.Image objects using only obj.tobytes(), which returns only the raw pixel data, without including metadata such as the image’s shape (width, height, mode). As a result, two images of different sizes (e.g., 30x100 and 100x30) with the same pixel byte sequence could generate the same hash value. This may lead to hash collisions, incorrect cache hits, and even data leakage or security risks. This issue has been patched in version 0.9.0. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46722"> read more </a> </article> <hr> <article> <h3> CVE-2025-48475 - FreeScout Unrestricted Client Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48475 <br> <strong>Published : </strong> May 29, 2025, 5:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the System an authorized user can view and edit, and which ones they cannot. As a result, an authorized user who does not have access to any of the existing mailboxes, as well as to any of the existing conversations, has the ability to view and edit the System's clients. The limitation of client visibility can be implemented by the limit_user_customer_visibility setting, however, in the specified scenarios, there is no check for the presence of this setting. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48475"> read more </a> </article> <hr> <article> <h3> CVE-2025-48474 - FreeScout Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48474 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for conversations. Users with show_only_assigned_conversations enabled can assign themselves to an arbitrary conversation from the mailbox to which they have access, thereby bypassing the restriction on viewing conversations. This issue has been patched in version 1.8.180. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48474"> read more </a> </article> <hr> <article> <h3> CVE-2025-48472 - FreeScout Access Control Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48472 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 21 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functionality that if the user does not have access to the mailbox, then after disabling (enabling) notifications for this mailbox, the user will gain access to it. This issue has been patched in version 1.8.179. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48472"> read more </a> </article> <hr> <article> <h3> CVE-2025-48473 - FreeScout Unauthenticated Message Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48473 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 21 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, when creating a conversation from a message in another conversation, there is no check to ensure that the user has the ability to view this message. Thus, the user can view arbitrary messages from other mailboxes or from other conversations to which they do not have access (access restriction to conversations is implemented by the show_only_assigned_conversations setting, which is also not checked). This issue has been patched in version 1.8.179. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48473"> read more </a> </article> <hr> <article> <h3> CVE-2025-3913 - Mattermost Team Privacy Setting Permission Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3913 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing team administrators without the 'invite user' permission to access and modify team invite IDs via the /api/v4/teams/:teamId/privacy endpoint. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3913"> read more </a> </article> <hr> <article> <h3> CVE-2025-45474 - Maccms SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45474 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45474"> read more </a> </article> <hr> <article> <h3> CVE-2025-48389 - FreeScout Deserialization Vulnerability (Arbitrary Code Execution) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48389 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to deserialization of untrusted data due to insufficient validation. Through the set function, a string with a serialized object can be passed, and when getting an option through the get method, deserialization will occur, which will allow arbitrary code execution This issue has been patched in version 1.8.178. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48389"> read more </a> </article> <hr> <article> <h3> CVE-2025-48390 - FreeScout Remote Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48390 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to code injection due to insufficient validation of user input in the php_path parameter. The backticks characters are not removed, as well as tabulation is not removed. When checking user input, the file_exists function is also called to check for the presence of such a file (folder) in the file system. A user with the administrator role can create a translation for the language, which will create a folder in the file system. Further in tools.php, the user can specify the path to this folder as php_path, which will lead to the execution of code in backticks. This issue has been patched in version 1.8.178. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48390"> read more </a> </article> <hr> <article> <h3> CVE-2025-48471 - FreeScout Apache Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48471 <br> <strong>Published : </strong> May 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient checking of files uploaded to the application. This allows files to be uploaded with the phtml and phar extensions, which can lead to remote code execution if the Apache web server is used. This issue has been patched in version 1.8.179. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48471"> read more </a> </article> <hr> <article> <h3> CVE-2025-48748 - Netwrix Directory Manager Hard-Coded Password Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48748 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48748"> read more </a> </article> <hr> <article> <h3> CVE-2025-4081 - DaVinci Resolve Dynamic Library Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4081 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one. A local attacker with unprivileged access can execute the application with altered dynamic library successfully bypassing Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue affects DaVinci Resolve on macOS in all versions. Last tested version: 19.1.3 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4081"> read more </a> </article> <hr> <article> <h3> CVE-2025-5321 - Aimhubio Aim Remote Sandbox Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5321 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Query leads to sandbox issue. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5321"> read more </a> </article> <hr> <article> <h3> CVE-2025-5334 - Devolutions Remote Desktop Manager Private Data Exposure and Unauthorized Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-5334 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorized access to private personal information. Under specific circumstances, entries may be unintentionally moved from user vaults to shared vaults when edited by their owners, making them accessible to other users. This issue affects the following versions : * Remote Desktop Manager Windows 2025.1.34.0 and earlier <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5334"> read more </a> </article> <hr> <article> <h3> CVE-2024-22653 - Yasm NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-22653 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-22653"> read more </a> </article> <hr> <article> <h3> CVE-2024-22654 - "tcpreplay Infinite Loop Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-22654 <br> <strong>Published : </strong> May 29, 2025, 3:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-22654"> read more </a> </article> <hr> <article> <h3> CVE-2025-46080 - HuoCMS File Upload Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46080 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46080"> read more </a> </article> <hr> <article> <h3> CVE-2025-5320 - Gradio CORS Handler Origin Validation Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5320 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument localhost_aliases leads to origin validation error. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5320"> read more </a> </article> <hr> <article> <h3> CVE-2025-37996 - KVM arm64 Uninitialized Pointer Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37996 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pKVM MMU in KVM") made the initialization of the local memcache variable in user_mem_abort() conditional, leaving a codepath where it is used uninitialized via kvm_pgtable_stage2_map(). This can fail on any path that requires a stage-2 allocation without transition via a permission fault or dirty logging. Fix this by making sure that memcache is always valid. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37996"> read more </a> </article> <hr> <article> <h3> CVE-2025-37997 - Netfilter Ipset Region Locking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37997 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37997"> read more </a> </article> <hr> <article> <h3> CVE-2025-37998 - Openvswitch Netlink Attribute Parsing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37998 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which ensures that only well-formed attributes are processed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37998"> read more </a> </article> <hr> <article> <h3> CVE-2025-37999 - "Erofs Linux Kernel File System Lockup Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37999 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_add_folio() fails (because it is full), erofs_fileio_scan_folio() needs to submit the I/O request via erofs_fileio_rq_submit() and allocate a new I/O request with an empty `struct bio`. Then it retries the bio_add_folio() call. However, at this point, erofs_onlinefolio_split() has already been called which increments `folio->private`; the retry will call erofs_onlinefolio_split() again, but there will never be a matching erofs_onlinefolio_end() call. This leaves the folio locked forever and all waiters will be stuck in folio_wait_bit_common(). This bug has been added by commit ce63cb62d794 ("erofs: support unencoded inodes for fileio"), but was practically unreachable because there was room for 256 folios in the `struct bio` - until commit 9f74ae8c9ac9 ("erofs: shorten bvecs[] for file-backed mounts") which reduced the array capacity to 16 folios. It was now trivial to trigger the bug by manually invoking readahead from userspace, e.g.: posix_fadvise(fd, 0, st.st_size, POSIX_FADV_WILLNEED); This should be fixed by invoking erofs_onlinefolio_split() only after bio_add_folio() has succeeded. This is safe: asynchronous completions invoking erofs_onlinefolio_end() will not unlock the folio because erofs_fileio_scan_folio() is still holding a reference to be released by erofs_onlinefolio_end() at the end. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37999"> read more </a> </article> <hr> <article> <h3> CVE-2025-46078 - HuoCMS Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-46078 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46078"> read more </a> </article> <hr> <article> <h3> CVE-2025-33043 - APTIOV BIOS Improper Input Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33043 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 2 hours, 47 minutes ago <br> <strong>Description : </strong>APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33043"> read more </a> </article> <hr> <article> <h3> CVE-2025-37993 - Linux Kernel: CAN: Uninitialized Spin Lock in m_can_class_allocate_dev </h3> <p> <strong>CVE ID : </strong>CVE-2025-37993 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 2 hours, 47 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe The spin lock tx_handling_spinlock in struct m_can_classdev is not being initialized. This leads the following spinlock bad magic complaint from the kernel, eg. when trying to send CAN frames with cansend from can-utils: | BUG: spinlock bad magic on CPU#0, cansend/95 | lock: 0xff60000002ec1010, .magic: 00000000, .owner: <none>/-1, .owner_cpu: 0 | CPU: 0 UID: 0 PID: 95 Comm: cansend Not tainted 6.15.0-rc3-00032-ga79be02bba5c #5 NONE | Hardware name: MachineWare SIM-V (DT) | Call Trace: | [<ffffffff800133e0>] dump_backtrace+0x1c/0x24 | [<ffffffff800022f2>] show_stack+0x28/0x34 | [<ffffffff8000de3e>] dump_stack_lvl+0x4a/0x68 | [<ffffffff8000de70>] dump_stack+0x14/0x1c | [<ffffffff80003134>] spin_dump+0x62/0x6e | [<ffffffff800883ba>] do_raw_spin_lock+0xd0/0x142 | [<ffffffff807a6fcc>] _raw_spin_lock_irqsave+0x20/0x2c | [<ffffffff80536dba>] m_can_start_xmit+0x90/0x34a | [<ffffffff806148b0>] dev_hard_start_xmit+0xa6/0xee | [<ffffffff8065b730>] sch_direct_xmit+0x114/0x292 | [<ffffffff80614e2a>] __dev_queue_xmit+0x3b0/0xaa8 | [<ffffffff8073b8fa>] can_send+0xc6/0x242 | [<ffffffff8073d1c0>] raw_sendmsg+0x1a8/0x36c | [<ffffffff805ebf06>] sock_write_iter+0x9a/0xee | [<ffffffff801d06ea>] vfs_write+0x184/0x3a6 | [<ffffffff801d0a88>] ksys_write+0xa0/0xc0 | [<ffffffff801d0abc>] __riscv_sys_write+0x14/0x1c | [<ffffffff8079ebf8>] do_trap_ecall_u+0x168/0x212 | [<ffffffff807a830a>] handle_exception+0x146/0x152 Initializing the spin lock in m_can_class_allocate_dev solves that problem. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37993"> read more </a> </article> <hr> <article> <h3> CVE-2025-37994 - "Linux Kernel USB TypeC UCSI NULL Pointer Access Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37994 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 2 hours, 47 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all pending tasks in the ucsi_displayport_work workqueue to finish executing before proceeding with the partner removal. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37994"> read more </a> </article> <hr> <article> <h3> CVE-2025-37995 - Linux Kernel Kobject Put Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37995 <br> <strong>Published : </strong> May 29, 2025, 2:15 p.m. | 2 hours, 47 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an internal kobject is created using 'module_ktype'. So call to 'kobject_put()' on error handling path causes an attempt to use an uninitialized completion pointer in 'module_kobject_release()'. In this scenario, we just want to release kobject without an extra synchronization required for a regular module unloading process, so adding an extra check whether 'complete()' is actually required makes 'kobject_put()' safe. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37995"> read more </a> </article> <hr> <article> <h3> CVE-2025-48045 - Apache Client Default Admin Credentials Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48045 <br> <strong>Published : </strong> May 29, 2025, 1:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48045"> read more </a> </article> <hr> <article> <h3> CVE-2025-48046 - Apache HTTP Server SMTP Server Password Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48046 <br> <strong>Published : </strong> May 29, 2025, 1:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48046"> read more </a> </article> <hr> <article> <h3> CVE-2025-48047 - NetFax Server Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48047 <br> <strong>Published : </strong> May 29, 2025, 1:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48047"> read more </a> </article> <hr> <article> <h3> CVE-2025-48388 - FreeScout Format String Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48388 <br> <strong>Published : </strong> May 29, 2025, 10:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application performs insufficient validation of user-supplied data, which is used as arguments to string formatting functions. As a result, an attacker can pass a string containing special symbols (\r, \n, \t)to the application. This issue has been patched in version 1.8.178. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48388"> read more </a> </article> <hr> <article> <h3> CVE-2025-4670 - Easy Digital Downloads Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4670 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's edd_receipt shortcode in all versions up to, and including, 3.3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4670"> read more </a> </article> <hr> <article> <h3> CVE-2025-4687 - Teltonika Networks Remote Management System (RMS) Account Pre-Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4687 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account and their company can then be managed by the attacker.This issue affects RMS: before 5.7. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4687"> read more </a> </article> <hr> <article> <h3> CVE-2025-5122 - Leaflet Map Block for WordPress Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5122 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The Map Block Leaflet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5122"> read more </a> </article> <hr> <article> <h3> CVE-2025-5286 - WordPress Bold Page Builder Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5286 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’ parameter in all versions up to, and including, 5.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5286"> read more </a> </article> <hr> <article> <h3> CVE-2024-52588 - Strapi SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52588 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery (SSRF). This issue has been patched in version 4.25.2. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52588"> read more </a> </article> <hr> <article> <h3> CVE-2025-27151 - Redis Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27151 <br> <strong>Published : </strong> May 29, 2025, 9:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27151"> read more </a> </article> <hr> <article> <h3> CVE-2025-3755 - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules Index Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3755 <br> <strong>Published : </strong> May 29, 2025, 5:15 a.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation of the CPU module (causing a DoS condtion on the CPU module), by sending specially crafted packets. The product is needed to reset for recovery. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3755"> read more </a> </article> <hr> <article> <h3> CVE-2025-4583 - Smash Balloon Social Photo Feed – Easy Social Feeds Plugin Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4583 <br> <strong>Published : </strong> May 29, 2025, 5:15 a.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-plugin` attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4583"> read more </a> </article> <hr> <article> <h3> CVE-2025-5273 - Mcp-Markdownify-Server File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5273 <br> <strong>Published : </strong> May 29, 2025, 5:15 a.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5273"> read more </a> </article> <hr> <article> <h3> CVE-2025-5276 - MCP Markdownify Server SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-5276 <br> <strong>Published : </strong> May 29, 2025, 5:15 a.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 29 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5276"> read more </a> </article> <hr> <article> <h3> CVE-2023-48726 - Apache Struts Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2023-48726 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-48726"> read more </a> </article> <hr> <article> <h3> CVE-2023-49137 - Cisco WebEx Meeting Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2023-49137 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-49137"> read more </a> </article> <hr> <article> <h3> CVE-2023-49139 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2023-49139 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-49139"> read more </a> </article> <hr> <article> <h3> CVE-2023-49604 - Apache HTTP Server Remote File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2023-49604 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-49604"> read more </a> </article> <hr> <article> <h3> CVE-2023-49904 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2023-49904 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-49904"> read more </a> </article> <hr> <article> <h3> CVE-2023-50338 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2023-50338 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-50338"> read more </a> </article> <hr> <article> <h3> CVE-2023-51753 - Apache HTTP Server XML Entity Injection </h3> <p> <strong>CVE ID : </strong>CVE-2023-51753 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-51753"> read more </a> </article> <hr> <article> <h3> CVE-2023-51756 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2023-51756 <br> <strong>Published : </strong> May 28, 2025, 10:15 p.m. | 16 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-51756"> read more </a> </article> <hr> <article> <h3> CVE-2025-27702 - Absolute Secure Access Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27702 <br> <strong>Published : </strong> May 28, 2025, 9:15 p.m. | 17 hours, 8 minutes ago <br> <strong>Description : </strong>CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly modify settings. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. There is no impact to system confidentiality or availability, impact to system integrity is high. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27702"> read more </a> </article> <hr> <article> <h3> CVE-2025-27703 - Absolute Secure Access Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27703 <br> <strong>Published : </strong> May 28, 2025, 9:15 p.m. | 17 hours, 8 minutes ago <br> <strong>Description : </strong>CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to a specific subset of privileged features in the console can elevate their permissions to access additional features in the console. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. The impact to system confidentiality is low, the impact to system integrity is high and the impact to system availability is low. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27703"> read more </a> </article> <hr> <article> <h3> CVE-2025-27706 - Absolute Secure Access Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-27706 <br> <strong>Published : </strong> May 28, 2025, 9:15 p.m. | 17 hours, 8 minutes ago <br> <strong>Description : </strong>CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator visits the page. Attack complexity is low, there are no preexisting attack requirements, privileges required are high and active user interaction is required. There is no impact on confidentiality, the impact on integrity is low and there is no impact on availability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27706"> read more </a> </article> <hr> <article> <h3> CVE-2022-46736 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2022-46736 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 17 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46736"> read more </a> </article> <hr> <article> <h3> CVE-2022-46739 - Apache Struts Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-46739 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 17 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46739"> read more </a> </article> <hr> <article> <h3> CVE-2022-47914 - Cisco WebEx Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-47914 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 17 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-47914"> read more </a> </article> <hr> <article> <h3> CVE-2022-46735 - Adobe Acrobat Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-46735 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 15 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46735"> read more </a> </article> <hr> <article> <h3> CVE-2022-45878 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-45878 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-45878"> read more </a> </article> <hr> <article> <h3> CVE-2022-46296 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-46296 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46296"> read more </a> </article> <hr> <article> <h3> CVE-2022-46419 - Apache Struts Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-46419 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46419"> read more </a> </article> <hr> <article> <h3> CVE-2022-46655 - Apache HTTP Server Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-46655 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46655"> read more </a> </article> <hr> <article> <h3> CVE-2022-46729 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-46729 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46729"> read more </a> </article> <hr> <article> <h3> CVE-2022-46734 - Apache HTTP Server Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2022-46734 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 14 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-46734"> read more </a> </article> <hr> <article> <h3> CVE-2022-45114 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-45114 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-45114"> read more </a> </article> <hr> <article> <h3> CVE-2022-45117 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-45117 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-45117"> read more </a> </article> <hr> <article> <h3> CVE-2022-45120 - Apache Struts Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-45120 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-45120"> read more </a> </article> <hr> <article> <h3> CVE-2022-45125 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2022-45125 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-45125"> read more </a> </article> <hr> <article> <h3> CVE-2022-44450 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-44450 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44450"> read more </a> </article> <hr> <article> <h3> CVE-2022-44452 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-44452 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44452"> read more </a> </article> <hr> <article> <h3> CVE-2022-44454 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2022-44454 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44454"> read more </a> </article> <hr> <article> <h3> CVE-2022-44607 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-44607 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44607"> read more </a> </article> <hr> <article> <h3> CVE-2022-44609 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-44609 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44609"> read more </a> </article> <hr> <article> <h3> CVE-2022-44613 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-44613 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44613"> read more </a> </article> <hr> <article> <h3> CVE-2022-44614 - Apache HTTP Server Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-44614 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44614"> read more </a> </article> <hr> <article> <h3> CVE-2022-44618 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-44618 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44618"> read more </a> </article> <hr> <article> <h3> CVE-2022-43659 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-43659 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43659"> read more </a> </article> <hr> <article> <h3> CVE-2022-43661 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-43661 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43661"> read more </a> </article> <hr> <article> <h3> CVE-2022-43669 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-43669 <br> <strong>Published : </strong> May 28, 2025, 7:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43669"> read more </a> </article> <hr> <article> <h3> CVE-2022-32233 - Cisco Internetwork Operating System (IOS) Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-32233 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-32233"> read more </a> </article> <hr> <article> <h3> CVE-2022-33893 - Apache HTTP Server Remote File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2022-33893 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-33893"> read more </a> </article> <hr> <article> <h3> CVE-2022-34859 - Apache HTTP Server HTTP Response Splitting </h3> <p> <strong>CVE ID : </strong>CVE-2022-34859 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-34859"> read more </a> </article> <hr> <article> <h3> CVE-2022-34860 - Apache Struts Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-34860 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-34860"> read more </a> </article> <hr> <article> <h3> CVE-2022-36298 - Microsoft Windows DLL Hijacking </h3> <p> <strong>CVE ID : </strong>CVE-2022-36298 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-36298"> read more </a> </article> <hr> <article> <h3> CVE-2022-36406 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-36406 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-36406"> read more </a> </article> <hr> <article> <h3> CVE-2022-38092 - Apache HTTP Server Remote File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2022-38092 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-38092"> read more </a> </article> <hr> <article> <h3> CVE-2022-40970 - Apache HTTP Server Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2022-40970 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-40970"> read more </a> </article> <hr> <article> <h3> CVE-2022-43493 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2022-43493 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43493"> read more </a> </article> <hr> <article> <h3> CVE-2022-43496 - Apache Struts SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-43496 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43496"> read more </a> </article> <hr> <article> <h3> CVE-2022-43502 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-43502 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43502"> read more </a> </article> <hr> <article> <h3> CVE-2024-47055 - Mautic Insecure Direct Object Reference (IDOR) / Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-47055 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks. Insecure Direct Object Reference (IDOR) / Missing Authorization: A missing authorization vulnerability exists in the cloneAction of the segment management. This allows an authenticated user to bypass intended permission restrictions and clone segments even if they lack the necessary permissions to create new ones. MitigationUpdate Mautic to a version that implements proper authorization checks for the cloneAction within the ListController.php. Ensure that users attempting to clone segments possess the appropriate creation permissions. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47055"> read more </a> </article> <hr> <article> <h3> CVE-2024-47057 - Mautic User Enumeration Timing Attack </h3> <p> <strong>CVE ID : </strong>CVE-2024-47057 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A user enumeration vulnerability exists in the "Forget your password" functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack. MitigationPlease update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47057"> read more </a> </article> <hr> <article> <h3> CVE-2024-57336 - M2Soft CROWNIX Report ERS Unauthenticated Administrator Account Access </h3> <p> <strong>CVE ID : </strong>CVE-2024-57336 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57336"> read more </a> </article> <hr> <article> <h3> CVE-2024-57337 - CROWNIX Report ERS Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2024-57337 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57337"> read more </a> </article> <hr> <article> <h3> CVE-2024-57338 - M2Soft CROWNIX Report ERS Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57338 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57338"> read more </a> </article> <hr> <article> <h3> CVE-2025-1461 - Vuetify VCalendar XSS Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-1461 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can't find an actual translation. This issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0. Note: Version 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ . <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1461"> read more </a> </article> <hr> <article> <h3> CVE-2025-30087 - Best Practical RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30087 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30087"> read more </a> </article> <hr> <article> <h3> CVE-2025-31500 - Best Practical RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31500 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31500"> read more </a> </article> <hr> <article> <h3> CVE-2025-31501 - Best Practical RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31501 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31501"> read more </a> </article> <hr> <article> <h3> CVE-2025-32803 - Kea File Permission Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32803 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32803"> read more </a> </article> <hr> <article> <h3> CVE-2025-47748 - Netwrix Directory Manager Hardcoded Password Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47748 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47748"> read more </a> </article> <hr> <article> <h3> CVE-2025-48747 - Netwrix Directory Manager Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48747 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48747"> read more </a> </article> <hr> <article> <h3> CVE-2025-48749 - Netwrix Directory Manager Data Exfiltration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48749 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48749"> read more </a> </article> <hr> <article> <h3> CVE-2025-5256 - Mautic Open Redirection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5256 <br> <strong>Published : </strong> May 28, 2025, 6:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or the delivery of exploit kits. Open Redirection via returnUrl Parameter: An Open Redirection vulnerability exists in the /s/action/unlock/user.user/0 endpoint. The returnUrl parameter, intended for post-action redirection, is not properly validated. This allows an attacker to craft a URL that, when clicked by a user, redirects them to an arbitrary external website controlled by the attacker. MitigationUpdate Mautic to a version that properly validates or sanitizes the returnUrl parameter to ensure that redirects only occur to trusted, internal URLs or explicitly whitelisted domains. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5256"> read more </a> </article> <hr> <article> <h3> CVE-2022-24067 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-24067 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-24067"> read more </a> </article> <hr> <article> <h3> CVE-2022-25868 - Apache HTTP Server Directory Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2022-25868 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-25868"> read more </a> </article> <hr> <article> <h3> CVE-2022-25870 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2022-25870 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-25870"> read more </a> </article> <hr> <article> <h3> CVE-2022-25909 - Apache HTTP Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2022-25909 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-25909"> read more </a> </article> <hr> <article> <h3> CVE-2022-26037 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-26037 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-26037"> read more </a> </article> <hr> <article> <h3> CVE-2022-26056 - Apache HTTP Server XML External Entity (XXE) Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-26056 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-26056"> read more </a> </article> <hr> <article> <h3> CVE-2022-26072 - Apache Struts Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2022-26072 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-26072"> read more </a> </article> <hr> <article> <h3> CVE-2022-26304 - Apache HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2022-26304 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-26304"> read more </a> </article> <hr> <article> <h3> CVE-2022-26424 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-26424 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-26424"> read more </a> </article> <hr> <article> <h3> CVE-2024-47056 - Mautic Sensitive Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-47056 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentials, API keys, and other critical system configurations. Sensitive Information Disclosure via .env File Exposure: The .env file, which typically contains environment variables and sensitive application configurations, is directly accessible via a web browser due to missing web server configurations that restrict access to such files. This allows an unauthenticated attacker to view the contents of this file by simply navigating to its URL. MitigationUpdate Mautic to the latest Mautic version. By default, Mautic does not use .env files for production data. For Apache users: Ensure your web server is configured to respect .htaccess files. For Nginx users: As Nginx does not inherently support .htaccess files, you must manually add a configuration block to your Nginx server configuration to deny access to .env files. Add the following to your Nginx configuration for the Mautic site: location ~ /\.env { deny all; } After modifying your Nginx configuration, remember to reload or restart your Nginx service for the changes to take effect. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47056"> read more </a> </article> <hr> <article> <h3> CVE-2025-32801 - Kea Root Privilege Escalation Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-32801 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32801"> read more </a> </article> <hr> <article> <h3> CVE-2025-32802 - Kea File Overwrite Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32802 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32802"> read more </a> </article> <hr> <article> <h3> CVE-2025-36572 - Dell PowerStore Hardcoded Credentials Use Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36572 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A low privileged attacker with remote access, with the knowledge of the hard-coded credentials, could potentially exploit this vulnerability to gain unauthorized access based on the hardcoded account's privileges. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36572"> read more </a> </article> <hr> <article> <h3> CVE-2025-48746 - Netwrix Directory Manager Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48746 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48746"> read more </a> </article> <hr> <article> <h3> CVE-2025-48925 - TeleMessage MD5 Hashing Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48925 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48925"> read more </a> </article> <hr> <article> <h3> CVE-2025-48926 - TeleMessage Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48926 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48926"> read more </a> </article> <hr> <article> <h3> CVE-2025-48927 - Apache TeleMessage Spring Boot Actuator Heap Dump Exposed Endpoint Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48927 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48927"> read more </a> </article> <hr> <article> <h3> CVE-2025-48928 - TeleMessage JSP Heap Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48928 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48928"> read more </a> </article> <hr> <article> <h3> CVE-2025-48929 - TeleMessage Long-Lived Credential Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48929 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiration time) that can be reused at a later date if discovered by an adversary, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48929"> read more </a> </article> <hr> <article> <h3> CVE-2025-48930 - TeleMessage In-Memory Cleartext Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48930 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 2.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48930"> read more </a> </article> <hr> <article> <h3> CVE-2025-48931 - TeleMessage MD5 Password Hashing Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-48931 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbow tables) with low computational effort. <br> <strong>Severity:</strong> 3.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48931"> read more </a> </article> <hr> <article> <h3> CVE-2025-5257 - Mautic Unauthenticated Page Preview Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-5257 <br> <strong>Published : </strong> May 28, 2025, 5:15 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to Unpublished Page Previews: The page preview functionality for unpublished content, accessible via predictable URLs (e.g., /page/preview/1, /page/preview/2), lacked proper authorization checks. This allowed any unauthenticated user to view content that was not yet intended for public release, and allowed search engines to index these private preview URLs, making the content publicly discoverable. MitigationMautic has patched this vulnerability by enforcing proper permission checks on preview pages. Users should upgrade to the patched version of Mautic or later. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5257"> read more </a> </article> <hr> <article> <h3> CVE-2024-38341 - IBM Sterling Secure Proxy Weak Cryptographic Algorithm Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-38341 <br> <strong>Published : </strong> May 28, 2025, 4:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-38341"> read more </a> </article> <hr> <article> <h3> CVE-2024-51453 - IBM Sterling Secure Proxy Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51453 <br> <strong>Published : </strong> May 28, 2025, 4:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51453"> read more </a> </article> <hr> <article> <h3> CVE-2025-45343 - Tenda W18E Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45343 <br> <strong>Published : </strong> May 28, 2025, 4:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45343"> read more </a> </article> <hr> <article> <h3> CVE-2025-3357 - IBM Tivoli Monitoring Array Index Validation Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3357 <br> <strong>Published : </strong> May 28, 2025, 3:15 p.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3357"> read more </a> </article> <hr> <article> <h3> CVE-2025-40651 - Real Easy Store Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40651 <br> <strong>Published : </strong> May 28, 2025, 2:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Reflected Cross-Site Scripting (XSS) vulnerability in Real Easy Store. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the keyword parameter in /index.php?a=search. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40651"> read more </a> </article> <hr> <article> <h3> CVE-2025-45997 - Sourcecodester Web-based Pharmacy Product Management System File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45997 <br> <strong>Published : </strong> May 28, 2025, 2:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45997"> read more </a> </article> <hr> <article> <h3> CVE-2025-48734 - Apache Commons BeanUtils Uncontrolled Enum Property Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48734 <br> <strong>Published : </strong> May 28, 2025, 2:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default. Releases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty(). Starting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests. This issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils 1.x are recommended to upgrade to version 1.11.0, which fixes the issue. Users of the artifact org.apache.commons:commons-beanutils2 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48734"> read more </a> </article> <hr> <article> <h3> CVE-2025-4134 - Avast Business Antivirus for Linux File Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4134 <br> <strong>Published : </strong> May 28, 2025, 2:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4134"> read more </a> </article> <hr> <article> <h3> CVE-2025-5277 - Amazon Web Services (AWS) MCP-Server Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5277 <br> <strong>Published : </strong> May 28, 2025, 2:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system. <br> <strong>Severity:</strong> 9.6 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5277"> read more </a> </article> <hr> <article> <h3> CVE-2025-4493 - Devolutions Server Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4493 <br> <strong>Published : </strong> May 28, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue. This issue affects the following versions : * Devolutions Server 2025.1.3.0 through 2025.1.7.0 * Devolutions Server 2024.3.15.0 and earlier <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4493"> read more </a> </article> <hr> <article> <h3> CVE-2025-3864 - Hackney HTTP Connection Pool Exhaustion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3864 <br> <strong>Published : </strong> May 28, 2025, 12:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3864"> read more </a> </article> <hr> <article> <h3> CVE-2025-5297 - SourceCodester Computer Store System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5297 <br> <strong>Published : </strong> May 28, 2025, 12:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5297"> read more </a> </article> <hr> <article> <h3> CVE-2025-5298 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5298 <br> <strong>Published : </strong> May 28, 2025, 12:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5298"> read more </a> </article> <hr> <article> <h3> CVE-2025-5299 - SourceCodester Client Database Management System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5299 <br> <strong>Published : </strong> May 28, 2025, 12:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5299"> read more </a> </article> <hr> <article> <h3> CVE-2025-40673 - DinoRANK Unauthorized Invoice Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-40673 <br> <strong>Published : </strong> May 28, 2025, 11:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A Missing Authorization vulnerability has been found in DinoRANK. This vulnerability allows an attacker to access invoices of any user via accessing endpoint '/facturas/YYYY-MM/SDRYYMM-XXXXX.pdf' because there is no access control. The pdf filename can be obtained via OSINT, insecure network traffic or brute force. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40673"> read more </a> </article> <hr> <article> <h3> CVE-2025-5295 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5295 <br> <strong>Published : </strong> May 28, 2025, 11:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FreeFloat FTP Server 1.0.0. This vulnerability affects unknown code of the component PORT Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5295"> read more </a> </article> <hr> <article> <h3> CVE-2025-1753 - LLama-Index OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1753 <br> <strong>Published : </strong> May 28, 2025, 10:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument can inject and execute arbitrary shell commands. This vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web application calls the LLama-Index CLI with a user-controlled filename. This issue can lead to arbitrary code execution on the affected system. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1753"> read more </a> </article> <hr> <article> <h3> CVE-2025-4963 - "WordPress WP Extended Stored Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4963 <br> <strong>Published : </strong> May 28, 2025, 10:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4963"> read more </a> </article> <hr> <article> <h3> CVE-2025-5287 - WordPress Likes and Dislikes Plugin SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5287 <br> <strong>Published : </strong> May 28, 2025, 9:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5287"> read more </a> </article> <hr> <article> <h3> CVE-2025-27526 - Apache InLong Deserialization of Untrusted Data JDBC Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27526 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11747 <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27526"> read more </a> </article> <hr> <article> <h3> CVE-2025-27528 - Apache InLong Deserialization of Untrusted Data Remote File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27528 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability allows attackers to bypass the security mechanisms of InLong JDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11747 <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27528"> read more </a> </article> <hr> <article> <h3> CVE-2025-46777 - Fortinet FortiPortal Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46777 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log. <br> <strong>Severity:</strong> 2.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46777"> read more </a> </article> <hr> <article> <h3> CVE-2025-47294 - Fortinet FortiOS Integer Overflow DoS </h3> <p> <strong>CVE ID : </strong>CVE-2025-47294 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47294"> read more </a> </article> <hr> <article> <h3> CVE-2025-47295 - Fortinet FortiOS Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47295 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47295"> read more </a> </article> <hr> <article> <h3> CVE-2025-5082 - "WordPress WP Attachments Reflected Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5082 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5082"> read more </a> </article> <hr> <article> <h3> CVE-2025-22252 - Fortinet FortiProxy Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22252 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22252"> read more </a> </article> <hr> <article> <h3> CVE-2025-24473 - Fortinet FortiClient Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-24473 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>A exposure of sensitive system information to an unauthorized control sphere in Fortinet FortiClientWindows versions 7.2.0 through 7.2.1 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup) <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24473"> read more </a> </article> <hr> <article> <h3> CVE-2025-25251 - FortiClient Mac Incorrect Authorization Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25251 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25251"> read more </a> </article> <hr> <article> <h3> CVE-2025-27522 - Apache InLong Deserialization of Untrusted Data Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27522 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/11732 <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27522"> read more </a> </article> <hr> <article> <h3> CVE-2024-54020 - Fortinet FortiManager Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-54020 <br> <strong>Published : </strong> May 28, 2025, 8:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests. <br> <strong>Severity:</strong> 2.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54020"> read more </a> </article> <hr> <article> <h3> CVE-2025-4009 - Evertz SVDN 3080ipx-10G PHP Web Management Interface Command Injection and Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4009 <br> <strong>Published : </strong> May 28, 2025, 7:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz. This web interface has two endpoints that are vulnerable to arbitrary command injection and the authentication mechanism has a flaw leading to authentication bypass. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices. This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4009"> read more </a> </article> <hr> <article> <h3> CVE-2025-4947 - libcurl QUIC Certificate Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4947 <br> <strong>Published : </strong> May 28, 2025, 7:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4947"> read more </a> </article> <hr> <article> <h3> CVE-2025-5025 - libcurl wolfSSL QUIC Certificate Pinning Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5025 <br> <strong>Published : </strong> May 28, 2025, 7:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC and HTTP/3. Since pinning makes the transfer succeed if the pin is fine, users could unwittingly connect to an impostor server without noticing. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5025"> read more </a> </article> <hr> <article> <h3> CVE-2025-4800 - WordPress MasterStudy LMS Pro Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4800 <br> <strong>Published : </strong> May 28, 2025, 6:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to a missing file type validation in the stm_lms_add_assignment_attachment function in all versions up to, and including, 4.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server, which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4800"> read more </a> </article> <hr> <article> <h3> CVE-2025-48848 - Citrix NetScaler HTTP Request Smuggling </h3> <p> <strong>CVE ID : </strong>CVE-2025-48848 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 8 hours, 20 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48848"> read more </a> </article> <hr> <article> <h3> CVE-2025-48844 - QNAP NAS Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-48844 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48844"> read more </a> </article> <hr> <article> <h3> CVE-2025-48845 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48845 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48845"> read more </a> </article> <hr> <article> <h3> CVE-2025-48846 - VMware Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-48846 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48846"> read more </a> </article> <hr> <article> <h3> CVE-2025-48847 - Dropbox Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-48847 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48847"> read more </a> </article> <hr> <article> <h3> CVE-2025-48842 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-48842 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 6 hours, 44 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48842"> read more </a> </article> <hr> <article> <h3> CVE-2025-48843 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48843 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 6 hours, 44 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48843"> read more </a> </article> <hr> <article> <h3> CVE-2023-41839 - Apache Struts Unvalidated Redirect to Malicious Site </h3> <p> <strong>CVE ID : </strong>CVE-2023-41839 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-41839"> read more </a> </article> <hr> <article> <h3> CVE-2025-48841 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48841 <br> <strong>Published : </strong> May 28, 2025, 4:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48841"> read more </a> </article> <hr> <article> <h3> CVE-2025-25029 - IBM Security Guardium File Download Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-25029 <br> <strong>Published : </strong> May 28, 2025, 2:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25029"> read more </a> </article> <hr> <article> <h3> CVE-2025-25025 - IBM Security Guardium Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25025 <br> <strong>Published : </strong> May 28, 2025, 2:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25025"> read more </a> </article> <hr> <article> <h3> CVE-2025-25026 - IBM Security Guardium Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25026 <br> <strong>Published : </strong> May 28, 2025, 2:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 28 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25026"> read more </a> </article> <hr> <article> <h3> CVE-2022-21150 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-21150 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-21150"> read more </a> </article> <hr> <article> <h3> CVE-2022-21200 - Apache HTTP Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2022-21200 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-21200"> read more </a> </article> <hr> <article> <h3> CVE-2024-11185 - Arista EOS VLAN Isolation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-11185 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLAN isolation and segmentation boundaries. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11185"> read more </a> </article> <hr> <article> <h3> CVE-2024-45094 - IBM DS8900F and DS8A00 HMC Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45094 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45094"> read more </a> </article> <hr> <article> <h3> CVE-2025-2796 - Arista EOS IPsec Anti-Replay Protection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2796 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2796"> read more </a> </article> <hr> <article> <h3> CVE-2025-2826 - Arista EOS Ingress ACL Enforcement Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2826 <br> <strong>Published : </strong> May 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. This can cause incoming packets to incorrectly be allowed or denied. The two symptoms of this issue on the affected release and platform are: * Packets which should be permitted may be dropped and, * Packets which should be dropped may be permitted. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2826"> read more </a> </article> <hr> <article> <h3> CVE-2025-32440 - NetAlertX Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32440 <br> <strong>Published : </strong> May 27, 2025, 10:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been patched in version 25.4.14. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32440"> read more </a> </article> <hr> <article> <h3> CVE-2025-40911 - Apache Net::CIDR::Set IP CIDR Leading Zero Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40911 <br> <strong>Published : </strong> May 27, 2025, 10:15 p.m. | 10 hours, 8 minutes ago <br> <strong>Description : </strong>Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation. Net::CIDR::Set used code from Net::CIDR::Lite, which had a similar vulnerability CVE-2021-47154. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40911"> read more </a> </article> <hr> <article> <h3> CVE-2025-5283 - Google Chrome libvpx Use-After-Free Heap Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5283 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 11 hours, 8 minutes ago <br> <strong>Description : </strong>Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5283"> read more </a> </article> <hr> <article> <h3> CVE-2025-5279 - Amazon Redshift Python Connector AzureOAuth2CredentialsProvider SSL Certificate Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5279 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 9 hours, 44 minutes ago <br> <strong>Description : </strong>When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token exchange process and retrieve an access token. This issue has been addressed in driver version 2.1.7. Users should upgrade to address this issue and ensure any forked or derivative code is patched to incorporate the new fixes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5279"> read more </a> </article> <hr> <article> <h3> CVE-2025-5280 - Google Chrome V8 Out-of-Bounds Heap Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5280 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 9 hours, 44 minutes ago <br> <strong>Description : </strong>Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5280"> read more </a> </article> <hr> <article> <h3> CVE-2025-5281 - Google Chrome BFCache User Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-5281 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 9 hours, 44 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5281"> read more </a> </article> <hr> <article> <h3> CVE-2025-5278 - "GNU Coreutils Sort Utility Heap Buffer Under-Read Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5278 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5278"> read more </a> </article> <hr> <article> <h3> CVE-2025-5063 - Google Chrome Use After Free in Compositing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5063 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5063"> read more </a> </article> <hr> <article> <h3> CVE-2025-5064 - Google Chrome Background Fetch API Cross-Origin Data Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5064 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5064"> read more </a> </article> <hr> <article> <h3> CVE-2025-5065 - Google Chrome FileSystemAccess API UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5065 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5065"> read more </a> </article> <hr> <article> <h3> CVE-2025-5066 - Google Chrome Android Messages UI Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-5066 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5066"> read more </a> </article> <hr> <article> <h3> CVE-2025-5067 - Inappropriate implementation in Tab Strip in Googl </h3> <p> <strong>CVE ID : </strong>CVE-2025-5067 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5067"> read more </a> </article> <hr> <article> <h3> CVE-2025-5198 - Stackrox XSS Vulnerability in Role Object Name </h3> <p> <strong>CVE ID : </strong>CVE-2025-5198 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5198"> read more </a> </article> <hr> <article> <h3> CVE-2025-5222 - ICU Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5222 <br> <strong>Published : </strong> May 27, 2025, 9:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5222"> read more </a> </article> <hr> <article> <h3> CVE-2025-46173 - Code-Projects Online Exam Mastering System Cross Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46173 <br> <strong>Published : </strong> May 27, 2025, 8:15 p.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46173"> read more </a> </article> <hr> <article> <h3> CVE-2025-45529 - SSCMS File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45529 <br> <strong>Published : </strong> May 27, 2025, 7:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45529"> read more </a> </article> <hr> <article> <h3> CVE-2024-13966 - ZKTeco BioTime Default Password Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-13966 <br> <strong>Published : </strong> May 27, 2025, 7:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password"). <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13966"> read more </a> </article> <hr> <article> <h3> CVE-2025-2872 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2872 <br> <strong>Published : </strong> May 27, 2025, 7:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-47577. Reason: This candidate is a reservation duplicate of CVE-2025-47577. Notes: All CVE users should reference CVE-2025-47577 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2872"> read more </a> </article> <hr> <article> <h3> CVE-2025-5252 - PHPGurukul News Portal Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5252 <br> <strong>Published : </strong> May 27, 2025, 6:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5252"> read more </a> </article> <hr> <article> <h3> CVE-2024-49197 - Samsung Exynos Wi-Fi Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49197 <br> <strong>Published : </strong> May 27, 2025, 6:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000. Lack of a boundary check in STOP_KEEP_ALIVE_OFFLOAD leads to out-of-bounds access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49197"> read more </a> </article> <hr> <article> <h3> CVE-2025-45475 - Maccms SSRF Vulnerability in Friend Link Management </h3> <p> <strong>CVE ID : </strong>CVE-2025-45475 <br> <strong>Published : </strong> May 27, 2025, 6:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45475"> read more </a> </article> <hr> <article> <h3> CVE-2025-22377 - Samsung Exynos Heap-based Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22377 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. A Heap-based Out-of-Bounds Write exists in the GPRS protocol implementation because of a mismatch between the actual length of the payload and the length declared within the payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22377"> read more </a> </article> <hr> <article> <h3> CVE-2025-23247 - NVIDIA CUDA Toolkit ELF Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23247 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23247"> read more </a> </article> <hr> <article> <h3> CVE-2025-48057 - Icinga 2 OpenSSL Certificate Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48057 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in versions 2.12.12, 2.13.12, and 2.14.6. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48057"> read more </a> </article> <hr> <article> <h3> CVE-2025-5249 - PHPGurukul News Portal Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5249 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5249"> read more </a> </article> <hr> <article> <h3> CVE-2025-5250 - PHPGurukul News Portal Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5250 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5250"> read more </a> </article> <hr> <article> <h3> CVE-2025-5251 - PHPGurukul News Portal Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5251 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5251"> read more </a> </article> <hr> <article> <h3> CVE-2024-49196 - Samsung Mobile Processor Exynos GPU Type Confusion Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-49196 <br> <strong>Published : </strong> May 27, 2025, 5:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49196"> read more </a> </article> <hr> <article> <h3> CVE-2022-0003 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2022-0003 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-0003"> read more </a> </article> <hr> <article> <h3> CVE-2022-21138 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-21138 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-21138"> read more </a> </article> <hr> <article> <h3> CVE-2024-56193 - "Bluetooth Adapter Permissions Bypass Vulnerability in [Vendor Name]" </h3> <p> <strong>CVE ID : </strong>CVE-2024-56193 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56193"> read more </a> </article> <hr> <article> <h3> CVE-2025-27700 - "Qualcomm Carrier Restrictions Bypass Local Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-27700 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27700"> read more </a> </article> <hr> <article> <h3> CVE-2025-27701 - Apache HTTP Server Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-27701 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27701"> read more </a> </article> <hr> <article> <h3> CVE-2025-48370 - Supabase Auth URL Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48370 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.69.1, the library functions getUserById, deleteUser, updateUserById, listFactors and deleteFactor did not require the user supplied values to be valid UUIDs. This could lead to a URL path traversal, resulting in the wrong API function being called. Implementations that follow security best practice and validate user controlled inputs, such as the userId are not affected by this. This issue has been patched in version 2.69.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48370"> read more </a> </article> <hr> <article> <h3> CVE-2025-5248 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5248 <br> <strong>Published : </strong> May 27, 2025, 4:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affected is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5248"> read more </a> </article> <hr> <article> <h3> CVE-2025-48383 - Django-Select2 Secret Token Exfiltration </h3> <p> <strong>CVE ID : </strong>CVE-2025-48383 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restricted query sets and restricted data. This issue has been patched in version 8.4.1. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48383"> read more </a> </article> <hr> <article> <h3> CVE-2025-5245 - GNU Binutils Debug Type Samep Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5245 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5245"> read more </a> </article> <hr> <article> <h3> CVE-2025-5246 - Campcodes Online Hospital Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5246 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5246"> read more </a> </article> <hr> <article> <h3> CVE-2025-5247 - Gowabby HFish Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5247 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5247"> read more </a> </article> <hr> <article> <h3> CVE-2025-3704 - DBAR Productions Volunteer Sign Up Sheets Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3704 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DBAR Productions Volunteer Sign Up Sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a before 5.5.5. The patch is available exclusively on GitHub at https://github.com/dbarproductions/pta-volunteer-sign-up-sheets , as the vendor encounters difficulties using SVN to deploy to the WordPress.org repository. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3704"> read more </a> </article> <hr> <article> <h3> CVE-2025-2236 - OpenText Advanced Authentication Information Elicitation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2236 <br> <strong>Published : </strong> May 27, 2025, 3:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced Authentication versions before 6.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2236"> read more </a> </article> <hr> <article> <h3> CVE-2025-48796 - GIMP ANI File Stack-Based Overflow RCE Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48796 <br> <strong>Published : </strong> May 27, 2025, 2:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48796"> read more </a> </article> <hr> <article> <h3> CVE-2025-48797 - "GIMP TGA Image File Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48797 <br> <strong>Published : </strong> May 27, 2025, 2:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48797"> read more </a> </article> <hr> <article> <h3> CVE-2025-48798 - GIMP XCF Image File Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48798 <br> <strong>Published : </strong> May 27, 2025, 2:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48798"> read more </a> </article> <hr> <article> <h3> CVE-2025-5271 - Mozilla Firefox Content Security Policy Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5271 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability affects Firefox < 139. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5271"> read more </a> </article> <hr> <article> <h3> CVE-2025-5272 - Firefox Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5272 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5272"> read more </a> </article> <hr> <article> <h3> CVE-2025-5264 - Firefox Local Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5264 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5264"> read more </a> </article> <hr> <article> <h3> CVE-2025-5265 - "Firefox Windows Local Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5265 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5265"> read more </a> </article> <hr> <article> <h3> CVE-2025-5266 - Mozilla Firefox Cross-Origin Information Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-5266 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5266"> read more </a> </article> <hr> <article> <h3> CVE-2025-5267 - "Firefox Clickjacking Payment Card Disclosure Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5267 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5267"> read more </a> </article> <hr> <article> <h3> CVE-2025-5268 - Mozilla Firefox Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5268 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5268"> read more </a> </article> <hr> <article> <h3> CVE-2025-5269 - Firefox ESR Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5269 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5269"> read more </a> </article> <hr> <article> <h3> CVE-2025-5270 - "Firefox SSL/TLS Man-in-the-Middle Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5270 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability affects Firefox < 139. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5270"> read more </a> </article> <hr> <article> <h3> CVE-2025-5244 - GNU Binutils Elflink Local Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5244 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5244"> read more </a> </article> <hr> <article> <h3> CVE-2025-5262 - VP8 WebRTC Double-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5262 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5262"> read more </a> </article> <hr> <article> <h3> CVE-2025-5263 - Firefox Cross-Origin Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5263 <br> <strong>Published : </strong> May 27, 2025, 1:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5263"> read more </a> </article> <hr> <article> <h3> CVE-2025-5117 - WordPress Property Plugin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5117 <br> <strong>Published : </strong> May 27, 2025, 12:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata in versions 1.0.5 to 1.0.6. This makes it possible for authenticated attackers, with Author‐level access and above, to elevate their privileges to that of an administrator by creating a package post whose property_package_user_role is set to administrator and then submitting the PayPal registration form. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5117"> read more </a> </article> <hr> <article> <h3> CVE-2025-4412 - Viscosity macOS Launch Agent Dynamic Library Loading Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4412 <br> <strong>Published : </strong> May 27, 2025, 10:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Transparency, Consent, and Control) identity. The acquired resource access is limited without entitlements such as access to the camera or microphone. Only user-granted permissions for file resources apply. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue was fixed in version 1.11.5 of Viscosity. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4412"> read more </a> </article> <hr> <article> <h3> CVE-2025-41652 - Cisco Router Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41652 <br> <strong>Published : </strong> May 27, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41652"> read more </a> </article> <hr> <article> <h3> CVE-2025-41653 - Citrix Web Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-41653 <br> <strong>Published : </strong> May 27, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41653"> read more </a> </article> <hr> <article> <h3> CVE-2025-41649 - Cisco Craft Router Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41649 <br> <strong>Published : </strong> May 27, 2025, 9:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41649"> read more </a> </article> <hr> <article> <h3> CVE-2025-41650 - Cisco Cmd Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41650 <br> <strong>Published : </strong> May 27, 2025, 9:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41650"> read more </a> </article> <hr> <article> <h3> CVE-2025-41651 - Cisco Device Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41651 <br> <strong>Published : </strong> May 27, 2025, 9:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41651"> read more </a> </article> <hr> <article> <h3> CVE-2025-23393 - Spacewalk Java Basic XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-23393 <br> <strong>Published : </strong> May 27, 2025, 8:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code on users machines.This issue affects Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3. <br> <strong>Severity:</strong> 5.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23393"> read more </a> </article> <hr> <article> <h3> CVE-2025-2407 - Mobatime AMX MTAPI IIS Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2407 <br> <strong>Published : </strong> May 27, 2025, 8:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2407"> read more </a> </article> <hr> <article> <h3> CVE-2024-47090 - Nagvis Unvalidated JavaScript Input Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-47090 <br> <strong>Published : </strong> May 27, 2025, 7:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47090"> read more </a> </article> <hr> <article> <h3> CVE-2024-38866 - Nagvis Livestatus Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-38866 <br> <strong>Published : </strong> May 27, 2025, 7:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-38866"> read more </a> </article> <hr> <article> <h3> CVE-2025-5231 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5231 <br> <strong>Published : </strong> May 27, 2025, 5:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Company Visitor Management System 1.0. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5231"> read more </a> </article> <hr> <article> <h3> CVE-2025-5232 - PHPGurukul Student Study Center Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5232 <br> <strong>Published : </strong> May 27, 2025, 5:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5232"> read more </a> </article> <hr> <article> <h3> CVE-2025-48054 - Radashi Prototype Pollution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48054 <br> <strong>Published : </strong> May 27, 2025, 5:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>Radashi is a TypeScript utility toolkit. Prior to version 12.5.1, the set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScript runtime, leading to unexpected behavior, denial of service, or even remote code execution in some specific scenarios. This issue has been patched in version 12.5.1. A workaround for this issue involves sanitizing the path argument provided to the set function to ensure that no part of the path string is __proto__, prototype, or constructor. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48054"> read more </a> </article> <hr> <article> <h3> CVE-2025-48382 - Apache Fess Temporary File Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48382 <br> <strong>Published : </strong> May 27, 2025, 5:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fess.helper.SystemHelper creates temporary files without explicitly setting restrictive permissions. This could lead to potential information disclosure, allowing unauthorized local users to access sensitive data contained in these files. This issue primarily affects environments where Fess is deployed in a shared or multi-user context. Typical single-user or isolated deployments have minimal or negligible practical impact. This issue has been patched in version 14.19.2. A workaround for this issue involves ensuring local access to the environment running Fess is restricted to trusted users only. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48382"> read more </a> </article> <hr> <article> <h3> CVE-2025-48791 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48791 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48791"> read more </a> </article> <hr> <article> <h3> CVE-2025-48792 - Oracle WebLogic Server Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-48792 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48792"> read more </a> </article> <hr> <article> <h3> CVE-2025-48793 - Fortinet SSL/TLS Implementation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48793 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48793"> read more </a> </article> <hr> <article> <h3> CVE-2025-48794 - Adobe Flash Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-48794 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48794"> read more </a> </article> <hr> <article> <h3> CVE-2025-48827 - vBulletin Unauthenticated API Controller Method Invocation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48827 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48827"> read more </a> </article> <hr> <article> <h3> CVE-2025-48828 - vBulletin PHP Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48828 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the "var_dump"("test") syntax, attackers can bypass security checks and execute arbitrary PHP code. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48828"> read more </a> </article> <hr> <article> <h3> CVE-2025-5227 - PHPGurukul Small CRM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5227 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5227"> read more </a> </article> <hr> <article> <h3> CVE-2025-5228 - D-Link DI-8100 HTTPd Get Parm Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5228 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5228"> read more </a> </article> <hr> <article> <h3> CVE-2025-5229 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5229 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5229"> read more </a> </article> <hr> <article> <h3> CVE-2025-5230 - PHPGurukul Online Nurse Hiring System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5230 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5230"> read more </a> </article> <hr> <article> <h3> CVE-2025-48790 - Apache Struts SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48790 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48790"> read more </a> </article> <hr> <article> <h3> CVE-2025-26211 - Gibbon CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26211 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Gibbon before 29.0.00 allows CSRF. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26211"> read more </a> </article> <hr> <article> <h3> CVE-2025-48742 - SIGB PMB Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48742 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>The installer in SIGB PMB before 8.0.1.2 allows remote code execution. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48742"> read more </a> </article> <hr> <article> <h3> CVE-2025-48786 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-48786 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48786"> read more </a> </article> <hr> <article> <h3> CVE-2025-48787 - Cisco Router Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-48787 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48787"> read more </a> </article> <hr> <article> <h3> CVE-2025-48788 - Apache HTTP Server Credentials Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48788 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48788"> read more </a> </article> <hr> <article> <h3> CVE-2025-48789 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48789 <br> <strong>Published : </strong> May 27, 2025, 4:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48789"> read more </a> </article> <hr> <article> <h3> CVE-2025-5225 - Campcodes Advanced Online Voting System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5225 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument voter leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5225"> read more </a> </article> <hr> <article> <h3> CVE-2025-5226 - PHPGurukul Small CRM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5226 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5226"> read more </a> </article> <hr> <article> <h3> CVE-2025-5221 - FreeFloat FTP Server QUOTE Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5221 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5221"> read more </a> </article> <hr> <article> <h3> CVE-2025-5224 - Campcodes Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5224 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5224"> read more </a> </article> <hr> <article> <h3> CVE-2025-48743 - SIGB PMB SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48743 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>SIGB PMB before 8.0.1.2 allows SQL injection. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48743"> read more </a> </article> <hr> <article> <h3> CVE-2025-48744 - Apache SIGB PMB Remote Code Execution and Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48744 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48744"> read more </a> </article> <hr> <article> <h3> CVE-2025-4682 - WordPress Gutenberg Blocks, Patterns Templates Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4682 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML attributes in Slider and Post Carousel widgets in all versions up to, and including, 5.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4682"> read more </a> </article> <hr> <article> <h3> CVE-2025-4683 - MStore API for WordPress - Unauthenticated Post Creation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4683 <br> <strong>Published : </strong> May 27, 2025, 3:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_blog function in all versions up to, and including, 4.17.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new posts. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4683"> read more </a> </article> <hr> <article> <h3> CVE-2025-33079 - IBM Controller Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-33079 <br> <strong>Published : </strong> May 27, 2025, 2:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33079"> read more </a> </article> <hr> <article> <h3> CVE-2025-5220 - FreeFloat FTP Server GET Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5220 <br> <strong>Published : </strong> May 27, 2025, 2:15 a.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the component GET Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5220"> read more </a> </article> <hr> <article> <h3> CVE-2025-5216 - PHPGurukul Student Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5216 <br> <strong>Published : </strong> May 27, 2025, 1:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5216"> read more </a> </article> <hr> <article> <h3> CVE-2025-5217 - FreeFloat FTP Server RMDIR Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5217 <br> <strong>Published : </strong> May 27, 2025, 1:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5217"> read more </a> </article> <hr> <article> <h3> CVE-2025-5218 - FreeFloat FTP Server LITERAL Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5218 <br> <strong>Published : </strong> May 27, 2025, 1:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5218"> read more </a> </article> <hr> <article> <h3> CVE-2025-5219 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5219 <br> <strong>Published : </strong> May 27, 2025, 1:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5219"> read more </a> </article> <hr> <article> <h3> CVE-2025-4783 - Elementor Exclusive Addons WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4783 <br> <strong>Published : </strong> May 27, 2025, 12:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML attributes of the Countdown Timer Widget in all versions up to, and including, 2.7.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4783"> read more </a> </article> <hr> <article> <h3> CVE-2025-5213 - Projectworlds Responsive E-Learning System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5213 <br> <strong>Published : </strong> May 27, 2025, 12:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_file.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5213"> read more </a> </article> <hr> <article> <h3> CVE-2025-5214 - Kashipara Responsive Online Learning Platform SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5214 <br> <strong>Published : </strong> May 27, 2025, 12:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/course_detail_user_new.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the affected product appears to have a typo in it. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5214"> read more </a> </article> <hr> <article> <h3> CVE-2025-5215 - D-Link DCS-5020L Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5215 <br> <strong>Published : </strong> May 27, 2025, 12:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 27 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5215"> read more </a> </article> <hr> <article> <h3> CVE-2025-5208 - SourceCodester Online Hospital Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5208 <br> <strong>Published : </strong> May 26, 2025, 11:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/check_availability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5208"> read more </a> </article> <hr> <article> <h3> CVE-2025-5210 - PHPGurukul Employee Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5210 <br> <strong>Published : </strong> May 26, 2025, 11:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5210"> read more </a> </article> <hr> <article> <h3> CVE-2025-5211 - PHPGurukul Employee Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5211 <br> <strong>Published : </strong> May 26, 2025, 11:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the file /myprofile.php. The manipulation of the argument EmpCode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5211"> read more </a> </article> <hr> <article> <h3> CVE-2025-5212 - PHPGurukul Employee Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5212 <br> <strong>Published : </strong> May 26, 2025, 11:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file /admin/editempexp.php. The manipulation of the argument emp1name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5212"> read more </a> </article> <hr> <article> <h3> CVE-2025-5206 - Pixelimity Installation SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5206 <br> <strong>Published : </strong> May 26, 2025, 10:15 p.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument site_description leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5206"> read more </a> </article> <hr> <article> <h3> CVE-2025-5207 - SourceCodester Client Database Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5207 <br> <strong>Published : </strong> May 26, 2025, 10:15 p.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadmin_update_profile.php. The manipulation of the argument nickname/email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5207"> read more </a> </article> <hr> <article> <h3> CVE-2025-5205 - 1000 Projects Daily College Class Work Report Book SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5205 <br> <strong>Published : </strong> May 26, 2025, 9:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwr_entry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5205"> read more </a> </article> <hr> <article> <h3> CVE-2025-5204 - Open Asset Import Library Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5204 <br> <strong>Published : </strong> May 26, 2025, 9:15 p.m. | 5 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The manipulation leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5204"> read more </a> </article> <hr> <article> <h3> CVE-2025-5202 - Open Asset Import Library Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5202 <br> <strong>Published : </strong> May 26, 2025, 8:15 p.m. | 6 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate_header of the file assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5202"> read more </a> </article> <hr> <article> <h3> CVE-2025-5203 - Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5203 <br> <strong>Published : </strong> May 26, 2025, 8:15 p.m. | 6 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5203"> read more </a> </article> <hr> <article> <h3> CVE-2025-5200 - Open Asset Import Library Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5200 <br> <strong>Published : </strong> May 26, 2025, 7:15 p.m. | 7 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5200"> read more </a> </article> <hr> <article> <h3> CVE-2025-5201 - Open Asset Import Library Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5201 <br> <strong>Published : </strong> May 26, 2025, 7:15 p.m. | 7 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5201"> read more </a> </article> <hr> <article> <h3> CVE-2025-23394 - openSUSE cyrus-imapd Symbolic Link Escalation to Root </h3> <p> <strong>CVE ID : </strong>CVE-2025-23394 <br> <strong>Published : </strong> May 26, 2025, 4:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23394"> read more </a> </article> <hr> <article> <h3> CVE-2025-23395 - Screen Root Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23395 <br> <strong>Published : </strong> May 26, 2025, 4:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and file mode 0644. All data written to the Screen PTY will be logged into this file, allowing to escalate to root privileges <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23395"> read more </a> </article> <hr> <article> <h3> CVE-2025-46802 - PuTTY Screen Session Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46802 <br> <strong>Published : </strong> May 26, 2025, 4:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46802"> read more </a> </article> <hr> <article> <h3> CVE-2025-23392 - Spacewalk Java Basic XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23392 <br> <strong>Published : </strong> May 26, 2025, 4:15 p.m. | 10 hours, 7 minutes ago <br> <strong>Description : </strong>A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code on target systems.This issue affects Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3; SUSE Manager Server Module 4.3: from ? before 4.3.85-150400.3.105.3. <br> <strong>Severity:</strong> 5.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23392"> read more </a> </article> <hr> <article> <h3> CVE-2025-46803 - Screen PTY Escalation of Privilege </h3> <p> <strong>CVE ID : </strong>CVE-2025-46803 <br> <strong>Published : </strong> May 26, 2025, 3:15 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46803"> read more </a> </article> <hr> <article> <h3> CVE-2025-37992 - Linux Kernel net_sched NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37992 <br> <strong>Published : </strong> May 26, 2025, 3:15 p.m. | 9 hours, 42 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change() operation, only the main skb queue was trimmed, potentially leaving packets in the gso_skb list. This could result in NULL pointer dereference when we only check sch->limit against sch->q.qlen. This patch introduces a new helper, qdisc_dequeue_internal(), which ensures both the gso_skb list and the main queue are properly flushed when trimming excess packets. All relevant qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie) are updated to use this helper in their ->change() routines. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37992"> read more </a> </article> <hr> <article> <h3> CVE-2025-46804 - Screen Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46804 <br> <strong>Published : </strong> May 26, 2025, 2:15 p.m. | 10 hours, 42 minutes ago <br> <strong>Description : </strong>A minor information leak when running Screen with setuid-root privileges allosw unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46804"> read more </a> </article> <hr> <article> <h3> CVE-2025-46805 - Screen Privilege Escalation TOCTOU Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46805 <br> <strong>Published : </strong> May 26, 2025, 2:15 p.m. | 10 hours, 42 minutes ago <br> <strong>Description : </strong>Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46805"> read more </a> </article> <hr> <article> <h3> CVE-2025-5196 - Wing FTP Server Lua Admin Console Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5196 <br> <strong>Published : </strong> May 26, 2025, 2:15 p.m. | 10 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 7.4.4 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains: "[W]e do not consider it as a security vulnerability, because the system admin in WingFTP has full permissions [...], but you can suggest the user run WingFTP service as Normal User rather than SYSTEM/Root, it will be safer." <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5196"> read more </a> </article> <hr> <article> <h3> CVE-2025-39498 - Spotlight Spotlight Social Media Feeds (Premium) Sensitive Data Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39498 <br> <strong>Published : </strong> May 26, 2025, 2:15 p.m. | 8 hours, 46 minutes ago <br> <strong>Description : </strong>Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds (Premium) allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds (Premium): from n/a through 1.7.1. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39498"> read more </a> </article> <hr> <article> <h3> CVE-2025-40663 - i2A Cronos Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-40663 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40663"> read more </a> </article> <hr> <article> <h3> CVE-2025-40664 - TCMAN GIM Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-40664 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40664"> read more </a> </article> <hr> <article> <h3> CVE-2025-40665 - TCMAN GIM Blind SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-40665 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in /GIMWeb/PC/frmCorrectivosList.aspx. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40665"> read more </a> </article> <hr> <article> <h3> CVE-2025-40666 - TCMAN GIM Blind SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40666 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40666"> read more </a> </article> <hr> <article> <h3> CVE-2025-40667 - TCMAN's GIM Missing Authorization Vulnerability (Authorization Bypass) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40667 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are not available through the user interface. To exploit the vulnerability the attacker must modify the HTTP code of the response from ‘302 Found’ to ‘200 OK’, as well as the hidden fields hdnReadOnly and hdnUserLogin. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40667"> read more </a> </article> <hr> <article> <h3> CVE-2025-5185 - Summer Pearl Group Vacation Rental Management Platform CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5185 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5185"> read more </a> </article> <hr> <article> <h3> CVE-2025-5186 - Thinkgem JeeSite SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-5186 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 9 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the function ResourceLoader.getResource of the file /cms/fileTemplate/form of the component URI Scheme Handler. The manipulation of the argument Name leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5186"> read more </a> </article> <hr> <article> <h3> CVE-2025-40650 - Clickedu IDOR Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-40650 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40650"> read more </a> </article> <hr> <article> <h3> CVE-2025-40652 - CoverManager Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40652 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Stored Cross-Site Scripting (XSS) vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page without the user having to take any further action. This can allow the attacker to steal sensitive information, such as session cookies, login credentials, and perform actions on behalf of the affected user. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40652"> read more </a> </article> <hr> <article> <h3> CVE-2025-40653 - M3M Printer Server Web User Enumeration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40653 <br> <strong>Published : </strong> May 26, 2025, 1:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40653"> read more </a> </article> <hr> <article> <h3> CVE-2025-5184 - Summer Pearl Group Vacation Rental Management Platform HTTP Response Header Handler Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-5184 <br> <strong>Published : </strong> May 26, 2025, 12:15 p.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP Response Header Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5184"> read more </a> </article> <hr> <article> <h3> CVE-2025-5183 - Summer Pearl Group Vacation Rental Management Platform Header Handler Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5183 <br> <strong>Published : </strong> May 26, 2025, 12:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as problematic. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5183"> read more </a> </article> <hr> <article> <h3> CVE-2025-5182 - "Summer Pearl Group Vacation Rental Management Platform Listing Handler Authorization Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5182 <br> <strong>Published : </strong> May 26, 2025, 11:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as critical. This vulnerability affects unknown code of the component Listing Handler. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5182"> read more </a> </article> <hr> <article> <h3> CVE-2025-5181 - Summer Pearl Group Vacation Rental Management Platform Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5181 <br> <strong>Published : </strong> May 26, 2025, 11:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. This affects an unknown part of the file /spgpm/updateListing. The manipulation of the argument spgLsTitle leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5181"> read more </a> </article> <hr> <article> <h3> CVE-2025-5180 - Wondershare Filmora Local Path Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5180 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5180"> read more </a> </article> <hr> <article> <h3> CVE-2025-40672 - ProactivaNet from Grupo Espiral MS Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40672 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A Privilege Escalation vulnerability has been found in ProactivaNet v3.24.0.0 from Grupo Espiral MS. This vulnerability allows any user to override the file panLoad.exe that will be executed by SYSTEM user via a programmed task. This would allow an attacker to obtain administrator permissions to perform whatever activities he/she wants, shuch as accessing sensitive information, executing code remotely, and even causing a denial of service (DoS). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40672"> read more </a> </article> <hr> <article> <h3> CVE-2025-4053 - Be-Tech Mifare Classic Card Cleartext Data Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4053 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4053"> read more </a> </article> <hr> <article> <h3> CVE-2025-4057 - ActiveMQ Artemis Password Regeneration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4057 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4057"> read more </a> </article> <hr> <article> <h3> CVE-2025-5177 - Realce Tecnologia Queue Ticket Kiosk Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5177 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to cross site scripting. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5177"> read more </a> </article> <hr> <article> <h3> CVE-2025-5178 - Realce Tecnologia Queue Ticket Kiosk Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5178 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/ajax.php of the component Image File Handler. The manipulation of the argument files[] leads to unrestricted upload. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5178"> read more </a> </article> <hr> <article> <h3> CVE-2025-5179 - Realce Tecnologia Queue Ticket Kiosk Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5179 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by this vulnerability is an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page. The manipulation of the argument Name/Usuário leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5179"> read more </a> </article> <hr> <article> <h3> CVE-2025-35003 - Apache NuttX RTOS Bluetooth Stack Buffer Overflow and Restriction Bypass Vulnerabilities </h3> <p> <strong>CVE ID : </strong>CVE-2025-35003 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in system crash, denial of service, or arbitrary code execution, after receiving maliciously crafted packets. NuttX's Bluetooth HCI/UART stack users are advised to upgrade to version 12.9.0, which fixes the identified implementation issues. This issue affects Apache NuttX: from 7.25 before 12.9.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35003"> read more </a> </article> <hr> <article> <h3> CVE-2025-40671 - AES Multimedia Gestnet SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-40671 <br> <strong>Published : </strong> May 26, 2025, 10:15 a.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fk_remoto_central’ parameter on the ‘/webservices/articles.php’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40671"> read more </a> </article> <hr> <article> <h3> CVE-2025-1985 - Cisco Web-UI Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1985 <br> <strong>Published : </strong> May 26, 2025, 9:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1985"> read more </a> </article> <hr> <article> <h3> CVE-2025-41654 - "IBM AIX SNMP Process Information Disclosure and Reboot Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-41654 <br> <strong>Published : </strong> May 26, 2025, 9:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41654"> read more </a> </article> <hr> <article> <h3> CVE-2025-41655 - Cisco Router Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41655 <br> <strong>Published : </strong> May 26, 2025, 9:15 a.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can access a URL which causes the device to reboot. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41655"> read more </a> </article> <hr> <article> <h3> CVE-2025-5175 - Erdogant PyPickle Save Function Improper Authorization Critical Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5175 <br> <strong>Published : </strong> May 26, 2025, 8:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named 14b4cae704a0bb4eb6723e238f25382d847a1917. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5175"> read more </a> </article> <hr> <article> <h3> CVE-2025-5176 - Realce Tecnologia Queue Ticket Kiosk SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5176 <br> <strong>Published : </strong> May 26, 2025, 8:15 a.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5176"> read more </a> </article> <hr> <article> <h3> CVE-2025-41441 - Mailform Pro CGI Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-41441 <br> <strong>Published : </strong> May 26, 2025, 7:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41441"> read more </a> </article> <hr> <article> <h3> CVE-2025-5173 - HumanSignal Label Studio ML Backend Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5173 <br> <strong>Published : </strong> May 26, 2025, 7:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/label_studio_ml/examples/yolo/utils/neural_nets.py of the component PT File Handler. The manipulation of the argument path leads to deserialization. An attack has to be approached locally. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5173"> read more </a> </article> <hr> <article> <h3> CVE-2025-5174 - Erdogant PyPickle Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5174 <br> <strong>Published : </strong> May 26, 2025, 7:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is identified as 14b4cae704a0bb4eb6723e238f25382d847a1917. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5174"> read more </a> </article> <hr> <article> <h3> CVE-2025-5171 - LliSoft MTA Maita Training System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5171 <br> <strong>Published : </strong> May 26, 2025, 6:17 a.m. | 7 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.download of the file com\llisoft\controller\OpenController.java. The manipulation of the argument url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 06:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5171"> read more </a> </article> <hr> <article> <h3> CVE-2025-5172 - Econtrata SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5172 <br> <strong>Published : </strong> May 26, 2025, 6:17 a.m. | 7 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown function of the file /valida. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 06:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5172"> read more </a> </article> <hr> <article> <h3> CVE-2025-5169 - Assimp MDLImporter Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5169 <br> <strong>Published : </strong> May 26, 2025, 5:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5169"> read more </a> </article> <hr> <article> <h3> CVE-2025-5170 - LliSoft MTA Maita Training System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5170 <br> <strong>Published : </strong> May 26, 2025, 5:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitiListRequestVo of the file com\llisoft\controller\admin\shiti\AdminShitiController.java. The manipulation of the argument stTypeIds leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5170"> read more </a> </article> <hr> <article> <h3> CVE-2025-5167 - Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5167 <br> <strong>Published : </strong> May 26, 2025, 4:15 a.m. | 8 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/AssetLib/LWO/LWOLoader.h. The manipulation of the argument out leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5167"> read more </a> </article> <hr> <article> <h3> CVE-2025-5168 - Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5168 <br> <strong>Published : </strong> May 26, 2025, 4:15 a.m. | 8 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5168"> read more </a> </article> <hr> <article> <h3> CVE-2025-5166 - Open Asset Import Library (Assimp) Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5166 <br> <strong>Published : </strong> May 26, 2025, 4:15 a.m. | 6 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5166"> read more </a> </article> <hr> <article> <h3> CVE-2025-5164 - PerfreeBlog JWT Handler Hard-Coded Cryptographic Key Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5164 <br> <strong>Published : </strong> May 26, 2025, 3:15 a.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5164"> read more </a> </article> <hr> <article> <h3> CVE-2025-5165 - Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5165 <br> <strong>Published : </strong> May 26, 2025, 3:15 a.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5165"> read more </a> </article> <hr> <article> <h3> CVE-2025-5163 - "Yangshare WarehouseManager Remote Unauthenticated Access Control Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5163 <br> <strong>Published : </strong> May 26, 2025, 2:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affects an unknown part. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5163"> read more </a> </article> <hr> <article> <h3> CVE-2025-5161 - H3C SecCenter SMP-E1114P Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5161 <br> <strong>Published : </strong> May 26, 2025, 1:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function operationDailyOut of the file /safeEvent/download. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5161"> read more </a> </article> <hr> <article> <h3> CVE-2025-5162 - H3C SecCenter SMP-E1114P02 Remote File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5162 <br> <strong>Published : </strong> May 26, 2025, 1:15 a.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this issue is some unknown functionality of the file /safeEvent/importFile/. The manipulation of the argument logGeneralFile/logGeneralFile_2 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5162"> read more </a> </article> <hr> <article> <h3> CVE-2025-2146 - Canon Printers Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2146 <br> <strong>Published : </strong> May 26, 2025, 12:15 a.m. | 10 hours, 7 minutes ago <br> <strong>Description : </strong>Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw firmware v05.07 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II firmware v05.07 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw/i-SENSYS MF553dw/i-SENSYS MF552dw/i-SENSYS MF455dw/i-SENSYS MF453dw/i-SENSYS LBP236dw/i-SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i-SENSYS X 1238iF II/i-SENSYS X 1238i II/i-SENSYS X 1238P II/i-SENSYS X 1238Pr II firmware v05.07 and earlier sold in Europe. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2146"> read more </a> </article> <hr> <article> <h3> CVE-2025-5159 - H3C SecCenter SMP-E1114P02 Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5159 <br> <strong>Published : </strong> May 26, 2025, 12:15 a.m. | 10 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5159"> read more </a> </article> <hr> <article> <h3> CVE-2025-5160 - H3C SecCenter SMP-E1114P02 Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5160 <br> <strong>Published : </strong> May 26, 2025, 12:15 a.m. | 10 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file /packetCaptureStrategy/download. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 26 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5160"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Autosur </h3> <p>nom, prénom, adresse email et postale, numéro de téléphone, numéro de plaque d’immatriculation</p> <p class="feed-time"> Mon May 26 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Autosur-2025-05-26"> read more </a> </article> <hr> <article> <h3> CVE-2025-5157 - H3C SecCenter SMP-E1114P02 Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5157 <br> <strong>Published : </strong> May 25, 2025, 11:15 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects the function fileContent of the file /cfgFile/fileContent. The manipulation of the argument filePath leads to path traversal. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5157"> read more </a> </article> <hr> <article> <h3> CVE-2025-5158 - H3C SecCenter SMP-E1114P02 Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5158 <br> <strong>Published : </strong> May 25, 2025, 11:15 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function downloadSoftware of the file /cfgFile/downloadSoftware. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5158"> read more </a> </article> <hr> <article> <h3> CVE-2025-5156 - H3C GR-5400AX Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5156 <br> <strong>Published : </strong> May 25, 2025, 10:15 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5156"> read more </a> </article> <hr> <article> <h3> CVE-2025-5155 - FoxCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5155 <br> <strong>Published : </strong> May 25, 2025, 8:15 p.m. | 13 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/admin/controller/Article.php. The manipulation of the argument ids leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5155"> read more </a> </article> <hr> <article> <h3> CVE-2025-5154 - PhonePe SQLite Database Cleartext Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5154 <br> <strong>Published : </strong> May 25, 2025, 7:15 p.m. | 14 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5154"> read more </a> </article> <hr> <article> <h3> CVE-2025-5153 - CMS Made Simple Design Manager Module Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5153 <br> <strong>Published : </strong> May 25, 2025, 6:15 p.m. | 14 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5153"> read more </a> </article> <hr> <article> <h3> CVE-2025-5152 - "Chanjet CRM SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5152 <br> <strong>Published : </strong> May 25, 2025, 5:15 p.m. | 15 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5152"> read more </a> </article> <hr> <article> <h3> CVE-2025-5151 - Defog-ai Introspect Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5151 <br> <strong>Published : </strong> May 25, 2025, 5:15 p.m. | 14 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function execute_analysis_code_safely of the file introspect/backend/tools/analysis_tools.py. The manipulation of the argument code leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is named 502. It is recommended to apply a patch to fix this issue. The code maintainer explains, that "[they] have added some workarounds to address this in #502, but will not be implementing a full fix. This is because this repo is meant to be run in a docker environment, which will significantly mitigate potential security risks. Having said that, we have added a SECURITY section in our README to make this clearer to users." <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5151"> read more </a> </article> <hr> <article> <h3> CVE-2025-5150 - "Docarray Web API Prototype Pollution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5150 <br> <strong>Published : </strong> May 25, 2025, 3:15 p.m. | 16 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function __getitem__ of the file /docarray/data/torch_dataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5150"> read more </a> </article> <hr> <article> <h3> CVE-2025-5149 - WCMS Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-5149 <br> <strong>Published : </strong> May 25, 2025, 1:15 p.m. | 18 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5149"> read more </a> </article> <hr> <article> <h3> CVE-2025-5147 - Netcore NBR1005GPEV2, NBR200V2, B6V2 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5147 <br> <strong>Published : </strong> May 25, 2025, 12:15 p.m. | 18 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This issue affects the function tools_ping of the file /usr/bin/network_tools. The manipulation of the argument url leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5147"> read more </a> </article> <hr> <article> <h3> CVE-2025-5148 - FunAudioLLM InspireMusic Pickle Data Handler Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5148 <br> <strong>Published : </strong> May 25, 2025, 12:15 p.m. | 18 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function load_state_dict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 784cbf8dde2cf1456ff808aeba23177e1810e7a9. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5148"> read more </a> </article> <hr> <article> <h3> CVE-2025-5146 - Netcore Routerd HTTP Header Handler Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5146 <br> <strong>Published : </strong> May 25, 2025, 7:15 a.m. | 21 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the argument pwd leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5146"> read more </a> </article> <hr> <article> <h3> CVE-2025-5145 - Netcore Query String Handler Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5145 <br> <strong>Published : </strong> May 25, 2025, 6:15 a.m. | 22 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5145"> read more </a> </article> <hr> <article> <h3> CVE-2025-5140 - Seeyon Zhiyuan OA Web Application System Server-Side Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5140 <br> <strong>Published : </strong> May 25, 2025, 2:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This affects the function this.oursNetService.getData of the file com\ours\www\ehr\openPlatform1\open4ClientType\controller\ThirdMenuController.class. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5140"> read more </a> </article> <hr> <article> <h3> CVE-2025-5138 - Bitwarden PDF File Handler Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5138 <br> <strong>Published : </strong> May 25, 2025, 1:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in Bitwarden up to 2.25.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5138"> read more </a> </article> <hr> <article> <h3> CVE-2025-5139 - Qualitor Office365 File Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5139 <br> <strong>Published : </strong> May 25, 2025, 1:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in Qualitor 8.20. It has been rated as critical. Affected by this issue is some unknown functionality of the file /html/ad/adconexaooffice365/request/testaConexaoOffice365.php. The manipulation of the argument nmconexao leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5139"> read more </a> </article> <hr> <article> <h3> CVE-2025-5136 - Tmall Payment Identifier Handler Insecure Randomness Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5136 <br> <strong>Published : </strong> May 25, 2025, 12:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown part of the file /tmall/order/pay/ of the component Payment Identifier Handler. The manipulation leads to insufficiently random values. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5136"> read more </a> </article> <hr> <article> <h3> CVE-2025-5137 - DedeCMS Distant Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5137 <br> <strong>Published : </strong> May 25, 2025, 12:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getfiles of the component Incomplete Fix CVE-2018-9175. The manipulation of the argument refiles leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 25 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5137"> read more </a> </article> <hr> <article> <h3> CVE-2025-5135 - Tmall Demo Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5135 <br> <strong>Published : </strong> May 24, 2025, 11:15 p.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issue is some unknown functionality of the file /tmall/admin/ of the component Product Details Page. The manipulation of the argument Product Name/Product Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5135"> read more </a> </article> <hr> <article> <h3> CVE-2025-5133 - Tmall Demo Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5133 <br> <strong>Published : </strong> May 24, 2025, 10:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5133"> read more </a> </article> <hr> <article> <h3> CVE-2025-5134 - Tmall Demo Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5134 <br> <strong>Published : </strong> May 24, 2025, 10:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an unknown functionality of the component Buy Item Page. The manipulation of the argument Detailed Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5134"> read more </a> </article> <hr> <article> <h3> CVE-2025-5131 - Tmall Demo Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5131 <br> <strong>Published : </strong> May 24, 2025, 9:15 p.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5131"> read more </a> </article> <hr> <article> <h3> CVE-2025-5132 - Tmall Demo Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5132 <br> <strong>Published : </strong> May 24, 2025, 9:15 p.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5132"> read more </a> </article> <hr> <article> <h3> CVE-2025-5130 - Tmall Demo Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5130 <br> <strong>Published : </strong> May 24, 2025, 8:15 p.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5130"> read more </a> </article> <hr> <article> <h3> CVE-2025-5129 - Sangfor aTrust Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5129 <br> <strong>Published : </strong> May 24, 2025, 5:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5129"> read more </a> </article> <hr> <article> <h3> CVE-2025-5128 - ScriptAndTools Real-Estate-website-in-PHP SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5128 <br> <strong>Published : </strong> May 24, 2025, 4:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected is an unknown function of the file /admin/ of the component Admin Login Panel. The manipulation of the argument Password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5128"> read more </a> </article> <hr> <article> <h3> CVE-2025-5127 - FLIR AX8 Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5127 <br> <strong>Published : </strong> May 24, 2025, 4:15 p.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in FLIR AX8 up to 1.46.16. This issue affects some unknown processing of the file /prod.php. The manipulation of the argument cmd leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5127"> read more </a> </article> <hr> <article> <h3> CVE-2025-5126 - "FLIR AX8 Remote Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5126 <br> <strong>Published : </strong> May 24, 2025, 3:15 p.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. The manipulation of the argument year/month/day/hour/minute leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5126"> read more </a> </article> <hr> <article> <h3> CVE-2025-5124 - Sony Security Camera Default Credentials Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5124 <br> <strong>Published : </strong> May 24, 2025, 1:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they "have published the 'Hardening Guide' on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords". <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5124"> read more </a> </article> <hr> <article> <h3> CVE-2025-4223 - WordPress Pagelayer Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4223 <br> <strong>Published : </strong> May 24, 2025, 5:15 a.m. | 1 day, 13 hours ago <br> <strong>Description : </strong>The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘login_url’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. A valid username/password pair needs to be supplied in order to be successfully exploited and any injected scripts will only execute in the context of that authenticated user. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4223"> read more </a> </article> <hr> <article> <h3> CVE-2025-4603 - eMagicOne Store Manager for WooCommerce Remote File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4603 <br> <strong>Published : </strong> May 24, 2025, 4:15 a.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4603"> read more </a> </article> <hr> <article> <h3> CVE-2025-5058 - eMagicOne Store Manager for WooCommerce - Unauthenticated File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5058 <br> <strong>Published : </strong> May 24, 2025, 4:15 a.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5058"> read more </a> </article> <hr> <article> <h3> CVE-2025-4602 - eMagicOne Store Manager for WooCommerce WordPress Arbitrary File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4602 <br> <strong>Published : </strong> May 24, 2025, 4:15 a.m. | 1 day, 10 hours ago <br> <strong>Description : </strong>The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and including, 1.2.5 via the get_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4602"> read more </a> </article> <hr> <article> <h3> CVE-2025-4336 - eMagicOne Store Manager for WooCommerce Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4336 <br> <strong>Published : </strong> May 24, 2025, 4:15 a.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable by unauthenticated attackers in default configurations where the the default password is left as 1:1, or where the attacker gains access to the credentials. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4336"> read more </a> </article> <hr> <article> <h3> CVE-2025-48756 - "Apache SCSIR Group Number Bit Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48756 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48756"> read more </a> </article> <hr> <article> <h3> CVE-2025-5055 - WordPress Smart Forms Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5055 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.98 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5055"> read more </a> </article> <hr> <article> <h3> CVE-2025-48755 - Spiral-rs Crate Zero-Sized Type Allocation Arbitrary Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-48755 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 1 day, 4 hours ago <br> <strong>Description : </strong>In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type). <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48755"> read more </a> </article> <hr> <article> <h3> CVE-2025-48754 - Rust memory_pages Division by Zero Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48754 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>In the memory_pages crate 0.1.0 for Rust, division by zero can occur. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48754"> read more </a> </article> <hr> <article> <h3> CVE-2025-48753 - "Anode SpinLock Data Race Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48753 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 23 hours, 12 minutes ago <br> <strong>Description : </strong>In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48753"> read more </a> </article> <hr> <article> <h3> CVE-2025-48751 - Apache Process_Lock Data Race </h3> <p> <strong>CVE ID : </strong>CVE-2025-48751 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 22 hours, 6 minutes ago <br> <strong>Description : </strong>The process_lock crate 0.1.0 for Rust allows data races in unlock. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48751"> read more </a> </article> <hr> <article> <h3> CVE-2025-48752 - Apache Process-Sync Pthread Mutex Unlock Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48752 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 22 hours, 6 minutes ago <br> <strong>Description : </strong>In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48752"> read more </a> </article> <hr> <article> <h3> CVE-2024-13427 - WordPress Pagelayer Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-13427 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 21 hours, 6 minutes ago <br> <strong>Description : </strong>The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially fixed in version 1.9.9 and completely fixed in version 2.0.1. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13427"> read more </a> </article> <hr> <article> <h3> CVE-2025-3869 - WordPress 4stats Plugin CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3869 <br> <strong>Published : </strong> May 24, 2025, 3:15 a.m. | 21 hours, 6 minutes ago <br> <strong>Description : </strong>The 4stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9. This is due to missing or incorrect nonce validation on the stats/stats.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 24 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3869"> read more </a> </article> <hr> <article> <h3> CVE-2025-5119 - Emlog Pro SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5119 <br> <strong>Published : </strong> May 23, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/api_controller.php. The manipulation of the argument tag leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5119"> read more </a> </article> <hr> <article> <h3> CVE-2025-48740 - StrangeBee TheHive CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48740 <br> <strong>Published : </strong> May 23, 2025, 8:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48740"> read more </a> </article> <hr> <article> <h3> CVE-2025-48741 - StrangeBee TheHive Broken Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48741 <br> <strong>Published : </strong> May 23, 2025, 8:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5.4.10 allows remote, authenticated, and unprivileged users to retrieve alerts, cases, logs, observables, or tasks, regardless of the user's permissions, through a specific API endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48741"> read more </a> </article> <hr> <article> <h3> CVE-2025-48738 - StrangeBee TheHive Email Flood Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48738 <br> <strong>Published : </strong> May 23, 2025, 8:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote attackers to use the password reset feature without limits. This can lead to several consequences, including mailbox storage exhaustion for targeted users, reputation damage to the SMTP server, potentially causing it to be blacklisted, and overload of the SMTP server's outbound mail queue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48738"> read more </a> </article> <hr> <article> <h3> CVE-2025-48739 - TheHive SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48739 <br> <strong>Published : </strong> May 23, 2025, 8:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote authenticated attackers with admin permissions (allowing them to access specific API endpoints) to manipulate URLs to direct requests to unexpected hosts or ports. This allows the attacker to use a TheHive server as a proxy to reach internal or otherwise restricted resources. This could be exploited to access other servers on the internal network. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48739"> read more </a> </article> <hr> <article> <h3> CVE-2025-48735 - BOS IPC SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48735 <br> <strong>Published : </strong> May 23, 2025, 8:15 p.m. | 1 day ago <br> <strong>Description : </strong>A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48735"> read more </a> </article> <hr> <article> <h3> CVE-2025-46176 - D-Link DIR-605L DIR-816L Telnet Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46176 <br> <strong>Published : </strong> May 23, 2025, 7:15 p.m. | 21 hours, 39 minutes ago <br> <strong>Description : </strong>Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46176"> read more </a> </article> <hr> <article> <h3> CVE-2025-44998 - TinyFileManager Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44998 <br> <strong>Published : </strong> May 23, 2025, 7:15 p.m. | 21 hours, 11 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44998"> read more </a> </article> <hr> <article> <h3> CVE-2024-51102 - PHPGURUKUL Student Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-51102 <br> <strong>Published : </strong> May 23, 2025, 6:15 p.m. | 22 hours, 11 minutes ago <br> <strong>Description : </strong>PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and password parameters. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51102"> read more </a> </article> <hr> <article> <h3> CVE-2023-34873 - MOBOTIX Camera Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-34873 <br> <strong>Published : </strong> May 23, 2025, 6:15 p.m. | 20 hours, 38 minutes ago <br> <strong>Description : </strong>On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-34873"> read more </a> </article> <hr> <article> <h3> CVE-2025-48378 - DNN XSS Through SVG Upload </h3> <p> <strong>CVE ID : </strong>CVE-2025-48378 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, uploaded SVG files could contain scripts and if rendered inline those scripts could run allowing XSS attacks. Version 9.13.9 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48378"> read more </a> </article> <hr> <article> <h3> CVE-2025-48377 - DNN Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48377 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 13 hours, 5 minutes ago <br> <strong>Description : </strong>DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48377"> read more </a> </article> <hr> <article> <h3> CVE-2025-32967 - OpenEMR Password Change Event Logging Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32967 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 12 hours, 5 minutes ago <br> <strong>Description : </strong>OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allows password change events to go unrecorded on the client-side log viewer, preventing administrators from auditing critical actions. This weakens traceability and opens the system to undetectable misuse by insiders or attackers. Version 7.0.3.4 contains a patch for the issue. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32967"> read more </a> </article> <hr> <article> <h3> CVE-2025-43860 - OpenEMR Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43860 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 12 hours, 5 minutes ago <br> <strong>Description : </strong>OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation and editing privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the (1) Text Box fields of Address, Address Line 2, Postal Code and City fields and (2) Drop Down menu options of Address Use, State and Country of the Additional Addresses section of the Contact tab in Patient Demographics. The injected script can execute in two scenarios: (1) dynamically during form input, and (2) when the form data is later loaded for editing. Version 7.0.3.4 contains a patch for the issue. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43860"> read more </a> </article> <hr> <article> <h3> CVE-2025-48375 - Schule Open-Source School Management System OTP Email Flooding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48375 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 12 hours, 5 minutes ago <br> <strong>Description : </strong>Schule is open-source school management system software. Prior to version 1.0.1, the file forgot_password.php (or equivalent endpoint responsible for email-based OTP generation) lacks proper rate limiting controls, allowing attackers to abuse the OTP request functionality. This vulnerability can be exploited to send an excessive number of OTP emails, leading to potential denial-of-service (DoS) conditions or facilitating user harassment through email flooding. Version 1.0.1 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48375"> read more </a> </article> <hr> <article> <h3> CVE-2025-48376 - DNN External URL Site Export RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-48376 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 12 hours, 5 minutes ago <br> <strong>Description : </strong>DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 9.13.9, a malicious SuperUser (Host) could craft a request to use an external url for a site export to then be imported. Version 9.13.9 fixes the issue. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48376"> read more </a> </article> <hr> <article> <h3> CVE-2023-53154 - cJSON parse_string Heap Buffer Over-read </h3> <p> <strong>CVE ID : </strong>CVE-2023-53154 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53154"> read more </a> </article> <hr> <article> <h3> CVE-2024-48704 - Apache Phpgurukul Medical Card Generation System HTML Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-48704 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48704"> read more </a> </article> <hr> <article> <h3> CVE-2024-51099 - PHPGURUKUL Medical Card Generation System Reflected XSS </h3> <p> <strong>CVE ID : </strong>CVE-2024-51099 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the searchdata parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51099"> read more </a> </article> <hr> <article> <h3> CVE-2024-51103 - PHPGURUKUL Student Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51103 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailid and id parameters. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51103"> read more </a> </article> <hr> <article> <h3> CVE-2025-24916 - Tenable Network Monitor Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-24916 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24916"> read more </a> </article> <hr> <article> <h3> CVE-2025-24917 - Tenable Network Monitor Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24917 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24917"> read more </a> </article> <hr> <article> <h3> CVE-2025-32794 - OpenEMR Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32794 <br> <strong>Published : </strong> May 23, 2025, 4:15 p.m. | 10 hours, 11 minutes ago <br> <strong>Description : </strong>OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the First and Last Name fields during patient registration. This code is later executed when viewing the patient's encounter under Orders → Procedure Orders. Version 7.0.3.4 contains a patch for the issue. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32794"> read more </a> </article> <hr> <article> <h3> CVE-2024-51360 - Apache Server PHP RCE </h3> <p> <strong>CVE ID : </strong>CVE-2024-51360 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51360"> read more </a> </article> <hr> <article> <h3> CVE-2025-5114 - Easysoft Zentaopms Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5114 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 11 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The manipulation of the argument filePath leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5114"> read more </a> </article> <hr> <article> <h3> CVE-2024-51108 - PHPGURUKUL Medical Card Generation System Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51108 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 6 hours, 5 minutes ago <br> <strong>Description : </strong>Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fromdate and todate parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51108"> read more </a> </article> <hr> <article> <h3> CVE-2022-31807 - SiPass Firmware Update Integrity Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2022-31807 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions), SiPass integrated ACC-AP (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly". <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-31807"> read more </a> </article> <hr> <article> <h3> CVE-2022-31812 - SiPass Integrated DOS Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2022-31812 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-31812"> read more </a> </article> <hr> <article> <h3> CVE-2024-48702 - PHPGurukul Old Age Home Management System HTML Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-48702 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>PHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48702"> read more </a> </article> <hr> <article> <h3> CVE-2024-51101 - PHPGURUKUL Restaurant Table Booking System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-51101 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51101"> read more </a> </article> <hr> <article> <h3> CVE-2024-51107 - PHPGURUKUL Medical Card Generation System Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51107 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the pagetitle, pagedes, and email parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51107"> read more </a> </article> <hr> <article> <h3> CVE-2018-25110 - Apache Marked ReDoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2018-25110 <br> <strong>Published : </strong> May 23, 2025, 3:15 p.m. | 4 hours, 5 minutes ago <br> <strong>Description : </strong>Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit this vulnerability by providing specially crafted markdown input, such as deeply nested or repetitively structured brackets or tag attributes, which cause the parser to hang and lead to a Denial of Service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2018-25110"> read more </a> </article> <hr> <article> <h3> CVE-2025-5112 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5112 <br> <strong>Published : </strong> May 23, 2025, 2:15 p.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5112"> read more </a> </article> <hr> <article> <h3> CVE-2025-5110 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5110 <br> <strong>Published : </strong> May 23, 2025, 2:15 p.m. | 4 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component VERBOSE Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5110"> read more </a> </article> <hr> <article> <h3> CVE-2025-5111 - FreeFloat FTP Server TYPE Command Handler Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5111 <br> <strong>Published : </strong> May 23, 2025, 2:15 p.m. | 4 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component TYPE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5111"> read more </a> </article> <hr> <article> <h3> CVE-2025-3580 - Grafana Server Administrator Account Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3580 <br> <strong>Published : </strong> May 23, 2025, 2:15 p.m. | 2 hours, 5 minutes ago <br> <strong>Description : </strong>An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator exists 2. The Server administrator is either: - Not part of any organization, or - Part of the same organization as the Organization administrator Impact: - Organization administrators can permanently delete Server administrator accounts - If the only Server administrator is deleted, the Grafana instance becomes unmanageable - No super-user permissions remain in the system - Affects all users, organizations, and teams managed in the instance The vulnerability is particularly serious as it can lead to a complete loss of administrative control over the Grafana instance. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3580"> read more </a> </article> <hr> <article> <h3> CVE-2025-48245 - Fullworks Quick Contact Form Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48245 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fullworks Quick Contact Form allows Reflected XSS. This issue affects Quick Contact Form : from n/a through 8.2.1. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48245"> read more </a> </article> <hr> <article> <h3> CVE-2025-48271 - Leadinfo Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48271 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Leadinfo Leadinfo allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Leadinfo: from n/a through 1.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48271"> read more </a> </article> <hr> <article> <h3> CVE-2025-48273 - WordPress Job Portal Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48273 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal allows Path Traversal. This issue affects WP Job Portal: from n/a through 2.3.2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48273"> read more </a> </article> <hr> <article> <h3> CVE-2025-48275 - Dastan800 Visual Header Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48275 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in dastan800 Visual Header allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Visual Header: from n/a through 1.3. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48275"> read more </a> </article> <hr> <article> <h3> CVE-2025-48283 - Majestic Support SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48283 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support allows SQL Injection. This issue affects Majestic Support: from n/a through 1.1.0. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48283"> read more </a> </article> <hr> <article> <h3> CVE-2025-48286 - ReDi Restaurant Reservation Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48286 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catkin ReDi Restaurant Reservation allows Reflected XSS. This issue affects ReDi Restaurant Reservation: from n/a through 24.1209. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48286"> read more </a> </article> <hr> <article> <h3> CVE-2025-48287 - Pagaleve Pix 4x sem juros - Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48287 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/a through 1.6.9. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48287"> read more </a> </article> <hr> <article> <h3> CVE-2025-48289 - AncoraThemes Kids Planet Deserialization of Untrusted Data Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48289 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet allows Object Injection. This issue affects Kids Planet: from n/a through 2.2.14. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48289"> read more </a> </article> <hr> <article> <h3> CVE-2025-48292 - GoodLayers Tourmaster PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48292 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster allows PHP Local File Inclusion. This issue affects Tourmaster: from n/a through 5.3.8. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48292"> read more </a> </article> <hr> <article> <h3> CVE-2025-5107 - Fujian Kelixun SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5107 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Fujian Kelixun 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /app/xml_cdr/xml_cdr_details.php. The manipulation of the argument uuid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5107"> read more </a> </article> <hr> <article> <h3> CVE-2025-5108 - Zongzhige ShopXO ZIP File Handler Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5108 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability was found in zongzhige ShopXO 6.5.0. It has been rated as critical. This issue affects the function Upload of the file app/admin/controller/Payment.php of the component ZIP File Handler. The manipulation of the argument params leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5108"> read more </a> </article> <hr> <article> <h3> CVE-2025-5109 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5109 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 3 hours, 5 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component STATUS Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5109"> read more </a> </article> <hr> <article> <h3> CVE-2025-47646 - Gilblas Ngunte Possi PSW Front-end Login Registration Weak Password Recovery Mechanism </h3> <p> <strong>CVE ID : </strong>CVE-2025-47646 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration allows Password Recovery Exploitation. This issue affects PSW Front-end Login & Registration: from n/a through 1.13. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47646"> read more </a> </article> <hr> <article> <h3> CVE-2025-47658 - ELEX WordPress HelpDesk Customer Ticketing System Unrestricted File Upload RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-47658 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System allows Upload a Web Shell to a Web Server. This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.2.7. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47658"> read more </a> </article> <hr> <article> <h3> CVE-2025-47660 - Codexpert, Inc WC Affiliate Deserialization of Untrusted Data Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47660 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate allows Object Injection. This issue affects WC Affiliate: from n/a through 2.9.1. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47660"> read more </a> </article> <hr> <article> <h3> CVE-2025-47663 - Mojoomla Hospital Management System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47663 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47663"> read more </a> </article> <hr> <article> <h3> CVE-2025-47670 - miniOrange WordPress Social Login and Register PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47670 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register allows PHP Local File Inclusion. This issue affects WordPress Social Login and Register: from n/a through 7.6.10. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47670"> read more </a> </article> <hr> <article> <h3> CVE-2025-47671 - LETSCMS SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47671 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan allows SQL Injection. This issue affects Binary MLM Plan: from n/a through 3.0. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47671"> read more </a> </article> <hr> <article> <h3> CVE-2025-47672 - miniOrange Discord Integration PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47672 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange miniOrange Discord Integration allows PHP Local File Inclusion. This issue affects miniOrange Discord Integration: from n/a through 2.2.2. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47672"> read more </a> </article> <hr> <article> <h3> CVE-2025-47673 - Arconix Shortcodes Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47673 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Reflected XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.16. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47673"> read more </a> </article> <hr> <article> <h3> CVE-2025-47678 - FunnelCockpit Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-47678 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit allows Reflected XSS. This issue affects FunnelCockpit: from n/a through 1.4.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47678"> read more </a> </article> <hr> <article> <h3> CVE-2025-47680 - Michel xiligroup dev xili-tidy-tags Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47680 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-tidy-tags allows Reflected XSS. This issue affects xili-tidy-tags: from n/a through 1.12.06. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47680"> read more </a> </article> <hr> <article> <h3> CVE-2025-47687 - StoreKeeper for WooCommerce Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47687 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. StoreKeeper for WooCommerce allows Upload a Web Shell to a Web Server. This issue affects StoreKeeper for WooCommerce: from n/a through 14.4.4. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47687"> read more </a> </article> <hr> <article> <h3> CVE-2025-47690 - Smackcoders Lead Form Data Collection to CRM Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47690 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in smackcoders Lead Form Data Collection to CRM allows Privilege Escalation. This issue affects Lead Form Data Collection to CRM: from n/a through 3.1. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47690"> read more </a> </article> <hr> <article> <h3> CVE-2025-48241 - Verge3D Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48241 <br> <strong>Published : </strong> May 23, 2025, 1:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D allows Reflected XSS. This issue affects Verge3D: from n/a through 4.9.3. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48241"> read more </a> </article> <hr> <article> <h3> CVE-2025-5105 - "Tozed ZLT W51 Heap Memory Corruption" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5105 <br> <strong>Published : </strong> May 23, 2025, 12:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5105"> read more </a> </article> <hr> <article> <h3> CVE-2025-5106 - Fujian Kelixun Filename Handler Os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5106 <br> <strong>Published : </strong> May 23, 2025, 12:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Fujian Kelixun 1.0. It has been classified as critical. This affects an unknown part of the file /app/fax/fax_view.php of the component Filename Handler. The manipulation of the argument fax_file leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5106"> read more </a> </article> <hr> <article> <h3> CVE-2025-36527 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36527 <br> <strong>Published : </strong> May 23, 2025, 11:15 a.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36527"> read more </a> </article> <hr> <article> <h3> CVE-2025-3893 - MegaBIP SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3893 <br> <strong>Published : </strong> May 23, 2025, 11:15 a.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability. Version 5.20 of MegaBIP fixes this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3893"> read more </a> </article> <hr> <article> <h3> CVE-2025-3894 - MegaBIP Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-3894 <br> <strong>Published : </strong> May 23, 2025, 11:15 a.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order to use the editor high privileges are required. Version 5.20 of MegaBIP fixes this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3894"> read more </a> </article> <hr> <article> <h3> CVE-2025-3895 - MegaBIP Password Reset Token Brute Force Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3895 <br> <strong>Published : </strong> May 23, 2025, 11:15 a.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value. It allows an unauthenticated attacker who know user login names to brute force these tokens and change account passwords (including these belonging to administrators). Version 5.20 of MegaBIP fixes this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3895"> read more </a> </article> <hr> <article> <h3> CVE-2025-41407 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41407 <br> <strong>Published : </strong> May 23, 2025, 11:15 a.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41407"> read more </a> </article> <hr> <article> <h3> CVE-2024-13945 - ASPECT Stored Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13945 <br> <strong>Published : </strong> May 23, 2025, 10:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13945"> read more </a> </article> <hr> <article> <h3> CVE-2025-4379 - DobryCMS Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4379 <br> <strong>Published : </strong> May 23, 2025, 10:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>DobryCMS in versions 2.* and lower is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in szukaj parameter allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. A hotfix for affected versions was released on 29.04.2025. It removes the vulnerability without incrementing the version. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4379"> read more </a> </article> <hr> <article> <h3> CVE-2025-47149 - i-FILTER Anti-Virus Sandbox Pattern File Validation Remote Code Execution/DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47149 <br> <strong>Published : </strong> May 23, 2025, 9:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation. If exploited, the product may treat an unauthorized pattern file as an authorized. If the product uses a specially crafted pattern file, information in the server where the product is running may be retrieved, and/or cause a denial of service (DoS) condition. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47149"> read more </a> </article> <hr> <article> <h3> CVE-2025-5096 - TablePress for WordPress DOM-Based Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5096 <br> <strong>Published : </strong> May 23, 2025, 9:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5096"> read more </a> </article> <hr> <article> <h3> CVE-2025-48695 - CyberDAVA Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48695 <br> <strong>Published : </strong> May 23, 2025, 5:15 a.m. | 7 hours, 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their privilege by abusing the following API due to the lack of access control: /api/v2/users/user/<user id>/role/ROLE/<Target role> (admin access can be achieved). <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48695"> read more </a> </article> <hr> <article> <h3> CVE-2025-48701 - OpenDCIM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48701 <br> <strong>Published : </strong> May 23, 2025, 4:15 a.m. | 8 hours, 43 minutes ago <br> <strong>Description : </strong>openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48701"> read more </a> </article> <hr> <article> <h3> CVE-2025-48708 - Artifex Ghostscript Argument Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48708 <br> <strong>Published : </strong> May 23, 2025, 4:15 a.m. | 8 hours, 43 minutes ago <br> <strong>Description : </strong>gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript through 10.05.0 lacks argument sanitization for the # case. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48708"> read more </a> </article> <hr> <article> <h3> CVE-2025-4594 - WordPress Tournamatch Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4594 <br> <strong>Published : </strong> May 23, 2025, 4:15 a.m. | 8 hours, 43 minutes ago <br> <strong>Description : </strong>The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trn-ladder-registration-button' shortcode in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4594"> read more </a> </article> <hr> <article> <h3> CVE-2025-5098 - PrinterShare Gmail Token Capture Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5098 <br> <strong>Published : </strong> May 23, 2025, 2:15 a.m. | 10 hours, 43 minutes ago <br> <strong>Description : </strong>PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5098"> read more </a> </article> <hr> <article> <h3> CVE-2025-5099 - Adobe PDF Out of Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5099 <br> <strong>Published : </strong> May 23, 2025, 2:15 a.m. | 10 hours, 43 minutes ago <br> <strong>Description : </strong>An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5099"> read more </a> </article> <hr> <article> <h3> CVE-2025-5100 - Apache Commons IO Double-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5100 <br> <strong>Published : </strong> May 23, 2025, 2:15 a.m. | 10 hours, 43 minutes ago <br> <strong>Description : </strong>A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5100"> read more </a> </article> <hr> <article> <h3> CVE-2025-2394 - Ecovacs Home Android and iOS Mobile Apps Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2394 <br> <strong>Published : </strong> May 23, 2025, 1:15 a.m. | 11 hours, 43 minutes ago <br> <strong>Description : </strong>Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2394"> read more </a> </article> <hr> <article> <h3> CVE-2025-4692 - ABUP Cloud Update Platform JWT Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4692 <br> <strong>Published : </strong> May 23, 2025, 12:15 a.m. | 12 hours, 43 minutes ago <br> <strong>Description : </strong>Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposed on the cloud platform. If the exploit is successful, the user can escalate privileges to access any device managed by the ABUP Cloud Update Platform. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 23 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4692"> read more </a> </article> <hr> <article> <h3> CVE-2025-48371 - OpenFGA Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48371 <br> <strong>Published : </strong> May 22, 2025, 11:15 p.m. | 13 hours, 43 minutes ago <br> <strong>Description : </strong>OpenFGA is an authorization/permission engine. OpenFGA versions 1.8.0 through 1.8.12 (corresponding to Helm chart openfga-0.2.16 through openfga-0.2.30 and docker 1.8.0 through 1.8.12) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users are affected under four specific conditions: First, calling Check API or ListObjects with an authorization model that has a relationship directly assignable by both type bound public access and userset; second, there are check or list object queries with contextual tuples for the relationship that can be directly assignable by both type bound public access and userset; third, those contextual tuples’s user field is an userset; and finally, type bound public access tuples are not assigned to the relationship. Users should upgrade to version 1.8.13 to receive a patch. The upgrade is backwards compatible. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48371"> read more </a> </article> <hr> <article> <h3> CVE-2025-4338 - Lantronix Device Installer XXE Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4338 <br> <strong>Published : </strong> May 22, 2025, 11:15 p.m. | 13 hours, 43 minutes ago <br> <strong>Description : </strong>Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device. An attacker could obtain credentials, access these network devices, and modify their configurations. An attacker may also gain access to the host running the Device Installer software or the password hash of the user running the application. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4338"> read more </a> </article> <hr> <article> <h3> CVE-2025-4562 - "Apache HTTP Server Remote Code Execution" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4562 <br> <strong>Published : </strong> May 22, 2025, 11:15 p.m. | 13 hours, 43 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4562"> read more </a> </article> <hr> <article> <h3> CVE-2025-4642 - CVE-2016-100005: Apache Struts Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-4642 <br> <strong>Published : </strong> May 22, 2025, 11:15 p.m. | 13 hours, 43 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4642"> read more </a> </article> <hr> <article> <h3> CVE-2025-4975 - Samsung Device Power Settings Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4975 <br> <strong>Published : </strong> May 22, 2025, 10:15 p.m. | 14 hours, 43 minutes ago <br> <strong>Description : </strong>When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4975"> read more </a> </article> <hr> <article> <h3> CVE-2025-47181 - Microsoft Edge Link Following Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47181 <br> <strong>Published : </strong> May 22, 2025, 10:15 p.m. | 14 hours, 5 minutes ago <br> <strong>Description : </strong>Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47181"> read more </a> </article> <hr> <article> <h3> CVE-2025-48374 - Zot Keycloak Client Secret Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48374 <br> <strong>Published : </strong> May 22, 2025, 9:15 p.m. | 15 hours, 5 minutes ago <br> <strong>Description : </strong>zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification. Prior to version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f), when using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example at container startup. Version 2.1.3 (corresponding to pseudoversion 1.4.4-0.20250522160828-8a99a3ed231f) fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48374"> read more </a> </article> <hr> <article> <h3> CVE-2025-48372 - Schule One-Time Password Brute-Force Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48372 <br> <strong>Published : </strong> May 22, 2025, 9:15 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) results in only 9000 possible combinations. This small keyspace makes the OTP highly vulnerable to brute-force attacks, especially in the absence of strong rate-limiting or lockout mechanisms. Version 1.0.1 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48372"> read more </a> </article> <hr> <article> <h3> CVE-2025-48373 - Schule Client-Side Role Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48373 <br> <strong>Published : </strong> May 22, 2025, 9:15 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different panels based on their role. Prior to version 1.0.1, this implementation poses a serious security risk because it assumes that the value of data.role is trustworthy on the client side. Attackers can manipulate JavaScript in the browser (e.g., via browser dev tools or intercepting API responses) and set data.role to any arbitrary value (e.g., "admin"), gaining unauthorized access to restricted areas of the application. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48373"> read more </a> </article> <hr> <article> <h3> CVE-2003-5004 - Apache HTTP Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2003-5004 <br> <strong>Published : </strong> May 22, 2025, 8:15 p.m. | 14 hours, 37 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2003-5004"> read more </a> </article> <hr> <article> <h3> CVE-2024-5962 - WSO2 WSO2 Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-5962 <br> <strong>Published : </strong> May 22, 2025, 8:15 p.m. | 14 hours, 37 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the authentication flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser. While this issue could allow an attacker to manipulate the user’s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-5962"> read more </a> </article> <hr> <article> <h3> CVE-2024-7487 - WSO2 Identity Server Bypass Authentication Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-7487 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 15 hours, 37 minutes ago <br> <strong>Description : </strong>An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed. Exploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7487"> read more </a> </article> <hr> <article> <h3> CVE-2024-6914 - WSO2 SOAP Unauthorized Account Takeover Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-6914 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 15 hours, 7 minutes ago <br> <strong>Description : </strong>An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges. This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the "/services" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the "Security Guidelines for Production Deployment" by disabling exposure to untrusted networks. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6914"> read more </a> </article> <hr> <article> <h3> CVE-2024-7103 - WSO2 Identity Server Reflected XSS </h3> <p> <strong>CVE ID : </strong>CVE-2024-7103 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 15 hours, 7 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the login flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser. While this issue could allow an attacker to manipulate the user’s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-7103"> read more </a> </article> <hr> <article> <h3> CVE-2024-51552 - ASPECT Password Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-51552 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 13 hours, 42 minutes ago <br> <strong>Description : </strong>Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51552"> read more </a> </article> <hr> <article> <h3> CVE-2024-51553 - ASPECT Predictable Filename Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51553 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 13 hours, 42 minutes ago <br> <strong>Description : </strong>Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51553"> read more </a> </article> <hr> <article> <h3> CVE-2024-48848 - Aspect Disk Overutilization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-48848 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 9 hours, 41 minutes ago <br> <strong>Description : </strong>Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48848"> read more </a> </article> <hr> <article> <h3> CVE-2024-41197 - Ocuco Innovation INVCLIENT.EXE Remote Authentication Bypass Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-41197 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 9 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41197"> read more </a> </article> <hr> <article> <h3> CVE-2024-41198 - Ocuco Innovation REPORTS.EXE Remote Authentication Bypass and Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41198 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 9 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41198"> read more </a> </article> <hr> <article> <h3> CVE-2024-41199 - Ocuco Innovation JOBMANAGER.EXE Authentication Bypass Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41199 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 9 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41199"> read more </a> </article> <hr> <article> <h3> CVE-2024-40462 - Ocuco Innovation Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40462 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 7 hours, 5 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40462"> read more </a> </article> <hr> <article> <h3> CVE-2024-41195 - Ocuco Innovation INNOVASERVICEINTF.EXE Privilege Escalation Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-41195 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 7 hours, 5 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41195"> read more </a> </article> <hr> <article> <h3> CVE-2024-41196 - Ocuco Innovation REPORTSERVER.EXE Remote Authentication Bypass and Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41196 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 7 hours, 5 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41196"> read more </a> </article> <hr> <article> <h3> CVE-2024-40460 - Ocuco Innovation Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40460 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40460"> read more </a> </article> <hr> <article> <h3> CVE-2024-40461 - Ocuco Innovation Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40461 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40461"> read more </a> </article> <hr> <article> <h3> CVE-2024-13955 - Aspect SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13955 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13955"> read more </a> </article> <hr> <article> <h3> CVE-2024-13956 - ASPECT SSL Verification Bypass Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-13956 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13956"> read more </a> </article> <hr> <article> <h3> CVE-2024-13957 - ASPECT SSRF Server Side Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2024-13957 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13957"> read more </a> </article> <hr> <article> <h3> CVE-2024-13958 - Aspect Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13958 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13958"> read more </a> </article> <hr> <article> <h3> CVE-2024-40458 - Ocuco Innovation Elevation of Privilege </h3> <p> <strong>CVE ID : </strong>CVE-2024-40458 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40458"> read more </a> </article> <hr> <article> <h3> CVE-2024-40459 - Ocuco Innovation APPMANAGER Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40459 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40459"> read more </a> </article> <hr> <article> <h3> CVE-2024-13952 - ASPECT Predictable Filename Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-13952 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13952"> read more </a> </article> <hr> <article> <h3> CVE-2024-13953 - Raritan ASPECT Device Logger Credential Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13953 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13953"> read more </a> </article> <hr> <article> <h3> CVE-2024-13954 - ASPECT Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13954 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13954"> read more </a> </article> <hr> <article> <h3> CVE-2024-13950 - Aspect Log Injection Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13950 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13950"> read more </a> </article> <hr> <article> <h3> CVE-2024-13951 - ASPECT Predictable Salt Hash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13951 <br> <strong>Published : </strong> May 22, 2025, 7:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13951"> read more </a> </article> <hr> <article> <h3> CVE-2024-13928 - ASPECT SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13928 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13928"> read more </a> </article> <hr> <article> <h3> CVE-2024-13929 - ASPECT Servlet Injection Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13929 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13929"> read more </a> </article> <hr> <article> <h3> CVE-2024-13930 - ASPECT DoS Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-13930 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13930"> read more </a> </article> <hr> <article> <h3> CVE-2024-13931 - ASPECT Relative Path Traversal File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13931 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13931"> read more </a> </article> <hr> <article> <h3> CVE-2024-52874 - Infoblox NETMRI SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-52874 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52874"> read more </a> </article> <hr> <article> <h3> CVE-2024-9639 - ASPECT Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9639 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9639"> read more </a> </article> <hr> <article> <h3> CVE-2025-2409 - ASPECT File Corruption Vulnerability (Write-What-Where) </h3> <p> <strong>CVE ID : </strong>CVE-2025-2409 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2409"> read more </a> </article> <hr> <article> <h3> CVE-2025-2410 - ASPECT Port Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2410 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2410"> read more </a> </article> <hr> <article> <h3> CVE-2025-30169 - Aspect File Upload and Execute PHP Script Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30169 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30169"> read more </a> </article> <hr> <article> <h3> CVE-2025-30170 - ASPECT File Path Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30170 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30170"> read more </a> </article> <hr> <article> <h3> CVE-2025-30171 - ASPECT System File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30171 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30171"> read more </a> </article> <hr> <article> <h3> CVE-2025-30172 - ASPECT Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30172 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30172"> read more </a> </article> <hr> <article> <h3> CVE-2025-30173 - Aspect Server-Side Request Forgery (SSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30173 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30173"> read more </a> </article> <hr> <article> <h3> CVE-2025-48066 - Wire Webapp Local Data Deletion Failure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48066 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the client to delete its local database on user logout does not result in deletion. This is the case for both temporary clients (marking the device as a public computer on login) and regular clients instructing the deletion of all personal information and conversations upon logout. Access to the machine is required to access the data. If encryption-at-rest is used, cryptographic material can't be exported. The underlying issue has been fixed with wire-webapp version 2025-05-14-production.0. In order to mitigate potential impact, the database must be manually deleted on devices where the option "This is a public computer" was used prior to log in or a log out with the request to delete local data with the affected versions has happened before. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48066"> read more </a> </article> <hr> <article> <h3> CVE-2025-48075 - Fiber Denial of Service Panic </h3> <p> <strong>CVE ID : </strong>CVE-2025-48075 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber.Ctx.BodyParser` can map flat data to nested slices using `key[idx]value` syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process the data. Since this data is user-provided, this could lead to denial of service for anyone relying on this `fiber.Ctx.BodyParser` functionality. Version 2.52.7 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48075"> read more </a> </article> <hr> <article> <h3> CVE-2025-48366 - Group-Office Stored Blind XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48366 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a stored and blind XSS vulnerability exists in the Phone Number field of the user profile within the GroupOffice application. This allows a malicious actor to inject persistent JavaScript payloads, which are triggered in the context of another user when they view the Address Book. Successful exploitation enables actions such as forced redirects, unauthorized fetch requests, or other arbitrary JavaScript execution without user interaction. Versions 6.8.119 and 25.0.20 contain a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48366"> read more </a> </article> <hr> <article> <h3> CVE-2025-48368 - Group-Office DOM-Based Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48368 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a DOM-based Cross-Site Scripting (XSS) vulnerability exists in the GroupOffice application, allowing attackers to execute arbitrary JavaScript code in the context of the victim's browser. This can lead to session hijacking, defacement, or redirection to malicious sites. The vulnerability can be triggered by injecting a crafted payload into a parameter that is later processed unsafely in the DOM. Versions 6.8.119 and 25.0.20 contain a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48368"> read more </a> </article> <hr> <article> <h3> CVE-2025-48369 - Group-Office Cross-Site Scripting (XSS) Vulnerability in Tasks Comment Functionality </h3> <p> <strong>CVE ID : </strong>CVE-2025-48369 <br> <strong>Published : </strong> May 22, 2025, 6:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a persistent Cross-Site Scripting (XSS) vulnerability exists in Groupoffice's tasks comment functionality, allowing attackers to execute arbitrary JavaScript by uploading an file with a crafted filename. When administrators or other users view the task containing this malicious file, the payload executes in their browser context. The application fails to sanitize image filenames before rendering them in the comment. By uploading an image with a crafted filename containing XSS payloads, attackers can steal sensitive information. Versions 6.8.119 and 25.0.20 contain a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48369"> read more </a> </article> <hr> <article> <h3> CVE-2025-43596 - MSP360 Backup Escalation of Privileges Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43596 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (released on 2025-05-15). <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43596"> read more </a> </article> <hr> <article> <h3> CVE-2025-45472 - Apache Autodeploy Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45472 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45472"> read more </a> </article> <hr> <article> <h3> CVE-2025-46715 - Sandboxie Kernel Pointer Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46715 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_GetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to write to. GetRegValue then writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer and the driver dumps the registry key contents we requested to it. This can be triggered by anyone on the system, including low integrity windows processes. Version 1.15.12 fixes the issue. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46715"> read more </a> </article> <hr> <article> <h3> CVE-2025-46716 - Sandboxie Kernel Pointer Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46716 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_SetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to read from. SetRegValue then reads an arbitrary address, which can be a kernel pointer, into a HKLM Security SBIE registry value. This can later be retrieved by API_GET_SECURE_PARAM. Version 1.15.12 fixes the issue. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46716"> read more </a> </article> <hr> <article> <h3> CVE-2025-47779 - Asterisk SIP Message Authentication Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47779 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get proper alignment. An authenticated attacker can spoof any user identity to send spam messages to the user with their authorization token. Abuse of this security issue allows authenticated attackers to send fake chat messages can be spoofed to appear to come from trusted entities. Even administrators who follow Security best practices and Security Considerations can be impacted. Therefore, abuse can lead to spam and enable social engineering, phishing and similar attacks. Versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk fix the issue. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47779"> read more </a> </article> <hr> <article> <h3> CVE-2025-47780 - Asterisk CLI Permissions Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47780 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, trying to disallow shell commands to be run via the Asterisk command line interface (CLI) by configuring `cli_permissions.conf` (e.g. with the config line `deny=!*`) does not work which could lead to a security risk. If an administrator running an Asterisk instance relies on the `cli_permissions.conf` file to work and expects it to deny all attempts to execute shell commands, then this could lead to a security vulnerability. Versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47780"> read more </a> </article> <hr> <article> <h3> CVE-2025-48061 - Wire Webapp Session Invalidation Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-48061 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>wire-webapp is the web application for the open-source messaging service Wire. A change caused a regression resulting in sessions not being properly invalidated. A user that logged out of the Wire webapp, could have been automatically logged in again after re-opening the application. This does not happen when the user is logged in as a temporary user by selecting "This is a public computer" during login or the user selects "Delete all your personal information and conversations on this device" upon logout. The underlying issue has been fixed with wire-webapp version 2025-05-20-production.0. As a workaround, this behavior can be prevented by either deleting all information upon logout as well as logging in as a temporary client. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48061"> read more </a> </article> <hr> <article> <h3> CVE-2024-48850 - ASPECT File Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-48850 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48850"> read more </a> </article> <hr> <article> <h3> CVE-2024-48853 - ASPECT Escalation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-48853 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48853"> read more </a> </article> <hr> <article> <h3> CVE-2025-33136 - IBM Aspera Faspex Immutable Data Disclosure and Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33136 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper protection of assumed immutable data. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33136"> read more </a> </article> <hr> <article> <h3> CVE-2025-33137 - IBM Aspera Faspex Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-33137 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side security. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33137"> read more </a> </article> <hr> <article> <h3> CVE-2025-33138 - IBM Aspera Faspex HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33138 <br> <strong>Published : </strong> May 22, 2025, 5:15 p.m. | 1 hour, 5 minutes ago <br> <strong>Description : </strong>IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33138"> read more </a> </article> <hr> <article> <h3> CVE-2025-23182 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-23182 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>CWE-203: Observable Discrepancy <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23182"> read more </a> </article> <hr> <article> <h3> CVE-2025-23183 - Apache HTTP Server Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23183 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>CWE-601: URL Redirection to Untrusted Site ('Open Redirect') <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23183"> read more </a> </article> <hr> <article> <h3> CVE-2025-2506 - EDB pglogical Replication Connection Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2506 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database configured for replication can execute the pglogical command to obtain read access to replicated tables. When pglogical runs it should verify it is running on a replication connection but does not perform this check. This vulnerability was introduced in the pglogical 3.x codebase, which is proprietary to EDB. The same code base has been integrated into BDR/PGD 4 and 5. To exploit the vulnerability the attacker needs at least CONNECT permissions to a database configured for replication and must understand a number of pglogical3/BDR specific commands and be able to decode the binary protocol. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2506"> read more </a> </article> <hr> <article> <h3> CVE-2025-45468 - FC Stable Diffusion Plus Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45468 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45468"> read more </a> </article> <hr> <article> <h3> CVE-2025-4366 - Pingora Pingora-proxy Request Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4366 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request execution and potential cache poisoning. Fixed in: https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff Impact: The issue could lead to request smuggling in cases where Pingora’s proxying framework, pingora-proxy, is used for caching allowing an attacker to manipulate headers and URLs in subsequent requests made on the same HTTP/1.1 connection. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4366"> read more </a> </article> <hr> <article> <h3> CVE-2025-5081 - Campcodes Cybercafe Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5081 <br> <strong>Published : </strong> May 22, 2025, 4:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adminprofile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5081"> read more </a> </article> <hr> <article> <h3> CVE-2025-32814 - Infoblox NETMRI SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32814 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32814"> read more </a> </article> <hr> <article> <h3> CVE-2025-32815 - Infoblox NETMRI Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32815 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32815"> read more </a> </article> <hr> <article> <h3> CVE-2025-32915 - Checkmk Incorrect Package Permissions Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32915 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32915"> read more </a> </article> <hr> <article> <h3> CVE-2025-45471 - Apache Spark Measure-Cold-Start Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45471 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45471"> read more </a> </article> <hr> <article> <h3> CVE-2025-5024 - "GNOME Remote Desktop RDP Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5024 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5024"> read more </a> </article> <hr> <article> <h3> CVE-2025-5079 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5079 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updateorder.php. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5079"> read more </a> </article> <hr> <article> <h3> CVE-2025-5080 - Tenda FH451 Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5080 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function webExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5080"> read more </a> </article> <hr> <article> <h3> CVE-2024-12093 - GitLab SAML XPath Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-12093 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12093"> read more </a> </article> <hr> <article> <h3> CVE-2024-54188 - Infoblox NETMRI File Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-54188 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54188"> read more </a> </article> <hr> <article> <h3> CVE-2025-0605 - GitLab Two-Factor Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-0605 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0605"> read more </a> </article> <hr> <article> <h3> CVE-2025-0679 - GitLab Email Address Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0679 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Under certain conditions un-authorised users can view full email addresses that should be partially obscured. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0679"> read more </a> </article> <hr> <article> <h3> CVE-2025-0993 - GitLab Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-0993 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. This could allow an authenticated attacker to cause a denial of service condition by exhausting server resources. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0993"> read more </a> </article> <hr> <article> <h3> CVE-2025-32813 - Infoblox NETMRI Unauthenticated Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32813 <br> <strong>Published : </strong> May 22, 2025, 3:16 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32813"> read more </a> </article> <hr> <article> <h3> CVE-2025-3111 - GitLab Kubernetes Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3111 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in the Kubernetes integration could allow an authenticated user to cause denial of service.. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3111"> read more </a> </article> <hr> <article> <h3> CVE-2025-4575 - OpenSSL -addreject Option Truncation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4575 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste error during minor refactoring of the code introduced this issue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate should be trusted only for the purpose of authenticating TLS servers but not for CMS signature verification and the CMS signature verification is intended to be marked as rejected with the -addreject option, the resulting CA certificate will be trusted for CMS signature verification purpose instead. Only users which use the trusted certificate format who use the openssl x509 command line application to add rejected uses are affected by this issue. The issues affecting only the command line application are considered to be Low severity. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4575"> read more </a> </article> <hr> <article> <h3> CVE-2025-4979 - GitLab Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4979 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4979"> read more </a> </article> <hr> <article> <h3> CVE-2025-5076 - FreeFloat FTP Server Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5076 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5076"> read more </a> </article> <hr> <article> <h3> CVE-2025-5077 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5077 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5077"> read more </a> </article> <hr> <article> <h3> CVE-2025-5078 - Campcodes Online Shopping Portal SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-5078 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/subcategory.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5078"> read more </a> </article> <hr> <article> <h3> CVE-2023-47466 - TagLib WAV ID3 Chunk Segmentation Violation </h3> <p> <strong>CVE ID : </strong>CVE-2023-47466 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-47466"> read more </a> </article> <hr> <article> <h3> CVE-2025-1110 - GitLab CE/EE GraphQL Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-1110 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via a crafted GraphQL query. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1110"> read more </a> </article> <hr> <article> <h3> CVE-2025-2853 - GitLab Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2853 <br> <strong>Published : </strong> May 22, 2025, 2:16 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper validation in GitLab could allow an authenticated user to cause a denial of service condition. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2853"> read more </a> </article> <hr> <article> <h3> CVE-2025-46713 - Sandboxie Arithmetic Overflow Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46713 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 0.0.1 and prior to 1.15.12, API_SET_SECURE_PARAM may have an arithmetic overflow deep in the memory allocation subsystem that would lead to a smaller allocation than requested, and a buffer overflow. Version 1.15.12 fixes the issue. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46713"> read more </a> </article> <hr> <article> <h3> CVE-2025-46714 - Sandboxie Arithmetic Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46714 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, API_GET_SECURE_PARAM has an arithmetic overflow leading to a small memory allocation and then a extremely large copy into the small allocation. Version 1.15.12 fixes the issue. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46714"> read more </a> </article> <hr> <article> <h3> CVE-2025-5075 - FreeFloat FTP Server Debug Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5075 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component DEBUG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5075"> read more </a> </article> <hr> <article> <h3> CVE-2025-2272 - "Forcepoint FIE Endpoint Uncontrolled Search Path Element Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2272 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2272"> read more </a> </article> <hr> <article> <h3> CVE-2025-3936 - Tridium Niagara Framework Windows Incorrect Permission Assignment for Critical Resource Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3936 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3936"> read more </a> </article> <hr> <article> <h3> CVE-2025-3937 - Tridium Niagara Framework and Enterprise Security Password Hash Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-3937 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3937"> read more </a> </article> <hr> <article> <h3> CVE-2025-3938 - Tridium Niagara Framework and Tridium Niagara Enterprise Security Cryptographic Step Omission </h3> <p> <strong>CVE ID : </strong>CVE-2025-3938 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3938"> read more </a> </article> <hr> <article> <h3> CVE-2025-3939 - Tridium Niagara Framework Cryptanalysis Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3939 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3939"> read more </a> </article> <hr> <article> <h3> CVE-2025-3940 - Tridium Niagara Framework Input Data Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3940 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3940"> read more </a> </article> <hr> <article> <h3> CVE-2025-3941 - Tridium Niagara Framework Windows ::DATA Alternate Data Stream Input Data Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3941 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3941"> read more </a> </article> <hr> <article> <h3> CVE-2025-3942 - Tridium Niagara Framework and Enterprise Security Log Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3942 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3942"> read more </a> </article> <hr> <article> <h3> CVE-2025-3943 - Tridium Niagara Framework GET Request Method With Sensitive Query Strings Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3943 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3943"> read more </a> </article> <hr> <article> <h3> CVE-2025-3944 - Tridium Niagara Framework/QNX File Manipulation Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3944 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3944"> read more </a> </article> <hr> <article> <h3> CVE-2025-3945 - Tridium Niagara Framework/Enterprise Security Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3945 <br> <strong>Published : </strong> May 22, 2025, 1:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3945"> read more </a> </article> <hr> <article> <h3> CVE-2025-5074 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5074 <br> <strong>Published : </strong> May 22, 2025, 12:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5074"> read more </a> </article> <hr> <article> <h3> CVE-2024-25010 - Ericsson RAN Compute and Site Controller Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-25010 <br> <strong>Published : </strong> May 22, 2025, 11:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-25010"> read more </a> </article> <hr> <article> <h3> CVE-2025-3444 - Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus LFI Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3444 <br> <strong>Published : </strong> May 22, 2025, 11:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3444"> read more </a> </article> <hr> <article> <h3> CVE-2025-3836 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3836 <br> <strong>Published : </strong> May 22, 2025, 11:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3836"> read more </a> </article> <hr> <article> <h3> CVE-2025-41403 - Zohocorp ManageEngine ADAudit Plus SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-41403 <br> <strong>Published : </strong> May 22, 2025, 11:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41403"> read more </a> </article> <hr> <article> <h3> CVE-2025-5073 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5073 <br> <strong>Published : </strong> May 22, 2025, 11:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component MKDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5073"> read more </a> </article> <hr> <article> <h3> CVE-2024-9544 - MapSVG WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9544 <br> <strong>Published : </strong> May 22, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 8.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9544"> read more </a> </article> <hr> <article> <h3> CVE-2025-4280 - Poedit for MacOS Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4280 <br> <strong>Published : </strong> May 22, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>MacOS version of Poedit bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Poedit, potentially disguising attacker's malicious intent. This issue has been fixed in 3.6.3 version of Poedit. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4280"> read more </a> </article> <hr> <article> <h3> CVE-2025-4405 - WordPress Hot Random Image Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4405 <br> <strong>Published : </strong> May 22, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4405"> read more </a> </article> <hr> <article> <h3> CVE-2025-4419 - WordPress Hot Random Image Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4419 <br> <strong>Published : </strong> May 22, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the 'path' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to access arbitrary images with allowed extensions, outside of the originally intended directory. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4419"> read more </a> </article> <hr> <article> <h3> CVE-2025-4123 - Grafana Cross-Site Scripting (XSS) via Client Path Traversal and Open Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-4123 <br> <strong>Published : </strong> May 22, 2025, 8:15 a.m. | 6 hours, 4 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permissions and if anonymous access is enabled, the XSS will work. If the Grafana Image Renderer plugin is installed, it is possible to exploit the open redirect to achieve a full read SSRF. The default Content-Security-Policy (CSP) in Grafana will block the XSS though the `connect-src` directive. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4123"> read more </a> </article> <hr> <article> <h3> CVE-2025-4133 - Blog2Social Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4133 <br> <strong>Published : </strong> May 22, 2025, 6:15 a.m. | 6 hours, 4 minutes ago <br> <strong>Description : </strong>The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 8.4.0 does not escape the title of posts when outputting them in a dashboard, which could allow users with the contributor role to perform Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4133"> read more </a> </article> <hr> <article> <h3> CVE-2025-5062 - WooCommerce WordPress PostMessage-Based Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5062 <br> <strong>Published : </strong> May 22, 2025, 4:16 a.m. | 8 hours, 4 minutes ago <br> <strong>Description : </strong>The WooCommerce plugin for WordPress is vulnerable to PostMessage-Based Cross-Site Scripting via the 'customize-store' page in all versions up to, and including, 9.4.2 due to insufficient input sanitization and output escaping on PostMessage data. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5062"> read more </a> </article> <hr> <article> <h3> CVE-2025-2759 - GStreamer Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2759 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25448. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2759"> read more </a> </article> <hr> <article> <h3> CVE-2025-3480 - MedDream WEB DICOM Viewer Information Disclosure (Cleartext Transmission of Credentials) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3480 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Web Portal. The issue results from the lack of encryption when transmitting credentials. An attacker can leverage this vulnerability to disclose transmitted credentials, leading to further compromise. Was ZDI-CAN-25842. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3480"> read more </a> </article> <hr> <article> <h3> CVE-2025-3481 - MedDream PACS Server DICOM File Parsing Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3481 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25827. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3481"> read more </a> </article> <hr> <article> <h3> CVE-2025-3482 - MedDream PACS Server DICOM File Parsing Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3482 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25826. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3482"> read more </a> </article> <hr> <article> <h3> CVE-2025-3483 - MedDream PACS Server DICOM File Parsing Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3483 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25825. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3483"> read more </a> </article> <hr> <article> <h3> CVE-2025-3484 - MedDream PACS Server DICOM File Parsing Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3484 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25853. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3484"> read more </a> </article> <hr> <article> <h3> CVE-2025-3486 - Allegra ZipEntry Valide Directory Traversal Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3486 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the isZipEntryValide method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-25730. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3486"> read more </a> </article> <hr> <article> <h3> CVE-2025-3881 - eCharge Hardy Barth cPH2 NTP Command Injection Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-3881 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the ntp parameter provided to the check_req.php endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-23113. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3881"> read more </a> </article> <hr> <article> <h3> CVE-2025-3882 - eCharge Hardy Barth cPH2 Command Injection Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3882 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the dest parameter provided to the nwcheckexec.php endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-23114. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3882"> read more </a> </article> <hr> <article> <h3> CVE-2025-3883 - eCharge Hardy Barth cPH2 Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3883 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET parameters provided to the index.php endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-23115. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3883"> read more </a> </article> <hr> <article> <h3> CVE-2025-3884 - Cloudera Hue Ace Editor Directory Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3884 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Ace Editor web application. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-24332. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3884"> read more </a> </article> <hr> <article> <h3> CVE-2025-3885 - Harman Becker MGU21 Bluetooth Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3885 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>Harman Becker MGU21 Bluetooth Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Harman Becker MGU21 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Bluetooth stack of the BCM89359 chipset. The issue results from the lack of proper validation of Bluetooth frames. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23942. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3885"> read more </a> </article> <hr> <article> <h3> CVE-2025-3887 - GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3887 <br> <strong>Published : </strong> May 22, 2025, 1:15 a.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of H265 slice headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26596. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 22 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3887"> read more </a> </article> <hr> <article> <h3> CVE-2025-34025 - Versa Concerto Privilege Escalation and Container Escape Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-34025 <br> <strong>Published : </strong> May 21, 2025, 11:15 p.m. | 11 hours, 34 minutes ago <br> <strong>Description : </strong>The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct host access depending on the host operating system configuration.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34025"> read more </a> </article> <hr> <article> <h3> CVE-2025-5059 - Campcodes Online Shopping Portal Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5059 <br> <strong>Published : </strong> May 21, 2025, 11:15 p.m. | 11 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5059"> read more </a> </article> <hr> <article> <h3> CVE-2025-48070 - Plane UserSerializer Account Takeover Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48070 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 34 minutes ago <br> <strong>Description : </strong>Plane is open-source project management software. Versions prior to 0.23 have insecure permissions in UserSerializer that allows users to change fields that are meant to be read-only, such as email. This can lead to account takeover when chained with another vulnerability such as cross-site scripting (XSS). Version 0.23 fixes the issue. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48070"> read more </a> </article> <hr> <article> <h3> CVE-2025-5056 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5056 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-products.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5056"> read more </a> </article> <hr> <article> <h3> CVE-2025-5057 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5057 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/insert-product.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5057"> read more </a> </article> <hr> <article> <h3> CVE-2025-34026 - Versa Concerto Traefik Reverse Proxy Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-34026 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 4 minutes ago <br> <strong>Description : </strong>The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34026"> read more </a> </article> <hr> <article> <h3> CVE-2025-34027 - Versa Concerto Traefik Reverse Proxy Authentication Bypass and Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-34027 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 4 minutes ago <br> <strong>Description : </strong>The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Time-of-Use (TOCTOU) write in combination with a race condition to achieve remote code execution via path loading manipulation, allowing an unauthenticated actor to achieve remote code execution (RCE).This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34027"> read more </a> </article> <hr> <article> <h3> CVE-2025-47942 - Open edX Platform Python Lib Zip File Download Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47942 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 4 minutes ago <br> <strong>Description : </strong>The Open edX Platform is a learning management platform. Prior to commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, edxapp has no built-in protection against downloading the python_lib.zip asset from courses, which is a concern since it often contains custom grading code or answers to course problems. This potentially affects any course using custom Python-graded problem blocks. The openedx/configuration repo has had a patch since 2016 in the form of an nginx rule, but this was only intended as a temporary mitigation. As the configuration repo has been deprecated and we have not been able to locate any similar protection in Tutor, it is likely that most deployments have no protection against python_lib.zip being downloaded. The recommended mitigation, implemented in commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, restricts python_lib.zip downloads to just the course team and site staff/superusers. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47942"> read more </a> </article> <hr> <article> <h3> CVE-2025-47947 - ModSecurity Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47947 <br> <strong>Published : </strong> May 21, 2025, 10:15 p.m. | 12 hours, 4 minutes ago <br> <strong>Description : </strong>ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47947"> read more </a> </article> <hr> <article> <h3> CVE-2025-5053 - FreeFloat FTP Server MDIR Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-5053 <br> <strong>Published : </strong> May 21, 2025, 9:16 p.m. | 11 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component MDIR Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5053"> read more </a> </article> <hr> <article> <h3> CVE-2025-5052 - FreeFloat FTP Server LS Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5052 <br> <strong>Published : </strong> May 21, 2025, 9:16 p.m. | 9 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component LS Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5052"> read more </a> </article> <hr> <article> <h3> CVE-2025-45753 - Vtiger CRM PHP Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45753 <br> <strong>Published : </strong> May 21, 2025, 9:16 p.m. | 7 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45753"> read more </a> </article> <hr> <article> <h3> CVE-2025-44040 - OrangeHRM Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44040 <br> <strong>Published : </strong> May 21, 2025, 9:16 p.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via the UserService.php and the checkFOrOldHash function <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44040"> read more </a> </article> <hr> <article> <h3> CVE-2025-36535 - Apache HTTP Server Unauthenticated Remote Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36535 <br> <strong>Published : </strong> May 21, 2025, 8:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36535"> read more </a> </article> <hr> <article> <h3> CVE-2025-41426 - Vertiv Stack Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41426 <br> <strong>Published : </strong> May 21, 2025, 8:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>Affected Vertiv products contain a stack based buffer overflow vulnerability. An attacker could exploit this vulnerability to gain code execution on the device. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41426"> read more </a> </article> <hr> <article> <h3> CVE-2025-45755 - Vtiger CRM Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-45755 <br> <strong>Published : </strong> May 21, 2025, 8:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature. An attacker can craft a malicious CSV file containing an XSS payload, mapped to the Service Name field. When the file is uploaded, the application improperly sanitizes user input, leading to persistent script execution. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45755"> read more </a> </article> <hr> <article> <h3> CVE-2025-46412 - Vertiv Unauthenticated Web Server Function Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46412 <br> <strong>Published : </strong> May 21, 2025, 8:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46412"> read more </a> </article> <hr> <article> <h3> CVE-2025-5051 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5051 <br> <strong>Published : </strong> May 21, 2025, 8:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component BINARY Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5051"> read more </a> </article> <hr> <article> <h3> CVE-2025-27558 - Wi-Fi Protected Access (WPA, WPA2, WPA3) and Wired Equivalent Privacy (WEP) Mesh Network FragAttacks </h3> <p> <strong>CVE ID : </strong>CVE-2025-27558 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected Access (WPA, WPA2, or WPA3) or Wired Equivalent Privacy (WEP), an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP A-MSDU frames. NOTE: this issue exists because of an incorrect fix for CVE-2020-24588. P802.11-REVme, as of early 2025, is a planned release of the 802.11 standard. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27558"> read more </a> </article> <hr> <article> <h3> CVE-2025-2261 - TIBCO ActiveMatrix Administrator Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2261 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2261"> read more </a> </article> <hr> <article> <h3> CVE-2025-3751 - Apache Web Server SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3751 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3751"> read more </a> </article> <hr> <article> <h3> CVE-2025-44083 - D-Link DI-8100 Remote Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44083 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authentication <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44083"> read more </a> </article> <hr> <article> <h3> CVE-2025-45752 - SeedDMS PHP Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45752 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45752"> read more </a> </article> <hr> <article> <h3> CVE-2025-5049 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5049 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unknown code of the component APPEND Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5049"> read more </a> </article> <hr> <article> <h3> CVE-2025-5050 - FreeFloat FTP Server BELL Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5050 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. This issue affects some unknown processing of the component BELL Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5050"> read more </a> </article> <hr> <article> <h3> CVE-2024-57529 - Jeppesen JetPlanner Pro Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57529 <br> <strong>Published : </strong> May 21, 2025, 7:16 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57529"> read more </a> </article> <hr> <article> <h3> CVE-2025-46822 - Apache Spring Boot Java Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46822 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46822"> read more </a> </article> <hr> <article> <h3> CVE-2025-47291 - Containerd CRI Kubernetes Cgroup Bypass Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-47291 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. As a workaround, disable usernamespaced pods in Kubernetes temporarily. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47291"> read more </a> </article> <hr> <article> <h3> CVE-2025-48060 - jq Heap Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48060 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48060"> read more </a> </article> <hr> <article> <h3> CVE-2025-48063 - XWiki Remote Code Execution via Required Rights Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48063 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the security model of required rights is that a user who doesn't have a right also cannot define that right as required right. That way, users who are editing documents on which required rights are enforced can be sure that they're not giving a right to a script or object that it didn't have before. A bug in the implementation of the enforcement of this rule means that in fact, it was possible for any user with edit right on a document to set programming right as required right. If then a user with programming right edited that document, the content of that document would gain programming right, allowing remote code execution. This thereby defeats most of the security benefits of required rights. As XWiki still performs the required rights analysis when a user edits a page even when required rights are enforced, the user with programming right would still be warned about the dangerous content unless the attacker managed to bypass this check. Note also that none of the affected versions include a UI for enabling the enforcing of required rights so it seems unlikely that anybody relied on them for security in the affected versions. As this vulnerability provides no additional attack surface unless all documents in the wiki enforce required rights, we consider the impact of this attack to be low even though gaining programming right could have a high impact. This vulnerability has been patched in XWiki 16.10.4 and 17.1.0RC1. No known workarounds are available except for upgrading. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48063"> read more </a> </article> <hr> <article> <h3> CVE-2025-48064 - GitHub Desktop Windows Network Share Path Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48064 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network share. This affects GitHub Desktop users on Windows that view malicious commits in the history view. macOS users are not affected. When viewing a file diff in the history view GitHub Desktop will call `git log` or `git diff` with the object id (SHA) of the commit, the name of the file, and the old name of the file if the file has been renamed. As a security precaution Git will attempt to fully resolve the old and new path via `realpath`, traversing symlinks, to ensure that the resolved paths reside within the repository working directory. This can lead to Git attempting to access a path that resides on a network share (UNC path) and in doing so Windows will attempt to perform NTLM authentication which passes information such as the computer name, the currently signed in (Windows) user name, and an NTLM hash. GitHub Desktop 3.4.20 and later fix this vulnerability. The beta channel includes the fix in 3.4.20-beta3. As a workaround to use until upgrading is possible, only browse commits in the history view that comes from trusted sources. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48064"> read more </a> </article> <hr> <article> <h3> CVE-2025-48069 - Apache ejson2env Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48069 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>ejson2env allows users to decrypt EJSON secrets and export them as environment variables. Prior to version 2.0.8, the `ejson2env` tool has a vulnerability related to how it writes to `stdout`. Specifically, the tool is intended to write an export statement for environment variables and their values. However, due to inadequate output sanitization, there is a potential risk where variable names or values may include malicious content, resulting in additional unintended commands being output to `stdout`. If this output is improperly utilized in further command execution, it could lead to command injection, allowing an attacker to execute arbitrary commands on the host system. Version 2.0.8 sanitizes output during decryption. Other mitigations involve avoiding use of `ejson2env` to decrypt untrusted user secrets and/or avoiding evaluating or executing the direct output from `ejson2env` without removing nonprintable characters. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48069"> read more </a> </article> <hr> <article> <h3> CVE-2025-5020 - Firefox for iOS URL Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5020 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client This vulnerability affects Firefox for iOS < 139. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5020"> read more </a> </article> <hr> <article> <h3> CVE-2025-5033 - XiaoBingby TeaCMS Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5033 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/me/teacms/controller/admin/UserManageController/addUser. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5033"> read more </a> </article> <hr> <article> <h3> CVE-2025-2102 - HYPR Passwordless Link Following Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2102 <br> <strong>Published : </strong> May 21, 2025, 6:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2102"> read more </a> </article> <hr> <article> <h3> CVE-2025-5030 - Ackites KillWxapkg os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5030 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5030"> read more </a> </article> <hr> <article> <h3> CVE-2025-5031 - Ackites KillWxapkg wxapkg File Decompression Handler Resource Consumption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5031 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5031"> read more </a> </article> <hr> <article> <h3> CVE-2025-5032 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5032 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5032"> read more </a> </article> <hr> <article> <h3> CVE-2025-48010 - Drupal One Time Password Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48010 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48010"> read more </a> </article> <hr> <article> <h3> CVE-2025-48011 - Drupal One Time Password Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48011 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48011"> read more </a> </article> <hr> <article> <h3> CVE-2025-48012 - Drupal One Time Password Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48012 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 before 1.3.0. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48012"> read more </a> </article> <hr> <article> <h3> CVE-2025-4415 - Piwik PRO Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4415 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Piwik PRO allows Cross-Site Scripting (XSS).This issue affects Piwik PRO: from 0.0.0 before 1.3.2. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4415"> read more </a> </article> <hr> <article> <h3> CVE-2025-4416 - Drupal Events Log Track Unrestricted Resource Allocation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4416 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1.11, from 4.0.0 before 4.0.2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4416"> read more </a> </article> <hr> <article> <h3> CVE-2025-20255 - Cisco Webex Meetings HTTP Cache Poisoning Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20255 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this vulnerability by manipulating stored HTTP responses within the service, also known as HTTP cache poisoning. A successful exploit could allow the attacker to cause the Webex Meetings service to return incorrect HTTP responses to clients. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20255"> read more </a> </article> <hr> <article> <h3> CVE-2025-20256 - Cisco Secure Network Analytics Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20256 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This vulnerability is due to insufficient input validation in specific fields of the web-based management interface. An attacker with valid administrative credentials could exploit this vulnerability by sending crafted input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.  <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20256"> read more </a> </article> <hr> <article> <h3> CVE-2025-20257 - Cisco Secure Network Analytics Manager/Cisco Secure Network Analytics Virtual Manager API Insufficient Authorization Vulnerability (Authentication Bypass) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20257 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Thi vulnerability is due to insufficient authorization enforcement on a specific API. An attacker could exploit this vulnerability by authenticating as a low-privileged user and performing API calls with crafted input. A successful exploit could allow the attacker to obfuscate legitimate findings in analytics reports or create false indications with alarms and alerts on an affected device. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20257"> read more </a> </article> <hr> <article> <h3> CVE-2025-20258 - Cisco Duo Email Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20258 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands into a portion of an email that is sent by the service. A successful exploit could allow the attacker to send emails that contain malicious content to unsuspecting users. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20258"> read more </a> </article> <hr> <article> <h3> CVE-2025-20267 - Cisco Identity Services Engine (ISE) Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20267 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20267"> read more </a> </article> <hr> <article> <h3> CVE-2025-25539 - Vasco v3 Local File Inclusion Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25539 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25539"> read more </a> </article> <hr> <article> <h3> CVE-2025-45754 - SeedDMS Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-45754 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45754"> read more </a> </article> <hr> <article> <h3> CVE-2025-48009 - Drupal Single Content Sync Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48009 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48009"> read more </a> </article> <hr> <article> <h3> CVE-2025-0372 - HYPR Passwordless Windows Race Condition Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0372 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0372"> read more </a> </article> <hr> <article> <h3> CVE-2025-20112 - Cisco Unified Communications and Contact Center Solutions Root Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20112 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attacker could exploit this vulnerability by executing crafted commands on the underlying operating system. A successful exploit could allow the attacker to escape the restricted shell and gain root privileges on the underlying operating system of an affected device. To successfully exploit this vulnerability, an attacker would need administrative access to the ESXi hypervisor. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20112"> read more </a> </article> <hr> <article> <h3> CVE-2025-20113 - Cisco Unified Intelligence Center Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20113 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HTTP requests. An attacker could exploit this vulnerability by submitting a crafted API or HTTP request to an affected system. A successful exploit could allow the attacker to access, modify, or delete data beyond the sphere of their intended access level, including obtaining potentially sensitive information stored in the system. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20113"> read more </a> </article> <hr> <article> <h3> CVE-2025-20114 - Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20114 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability by submitting crafted API requests to an affected system to execute an insecure direct object reference attack. A successful exploit could allow the attacker to access specific data that is associated with different users on the affected system. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20114"> read more </a> </article> <hr> <article> <h3> CVE-2025-20152 - Cisco ISE RADIUS Message Processing Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20152 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a specific authentication request to a network access device (NAD) that uses Cisco ISE for authentication, authorization, and accounting (AAA). A successful exploit could allow the attacker to cause Cisco ISE to reload. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20152"> read more </a> </article> <hr> <article> <h3> CVE-2025-20242 - Cisco Cloud Connect CCE Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20242 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attacker to read and modify data on an affected device. This vulnerability is due to a lack of proper authentication controls. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port on an affected device. A successful exploit could allow the attacker to read or modify data on the affected device. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20242"> read more </a> </article> <hr> <article> <h3> CVE-2025-20246 - Cisco Webex Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20246 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20246"> read more </a> </article> <hr> <article> <h3> CVE-2025-20247 - Cisco Webex Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20247 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20247"> read more </a> </article> <hr> <article> <h3> CVE-2025-20250 - "Cisco Webex Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20250 <br> <strong>Published : </strong> May 21, 2025, 5:15 p.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20250"> read more </a> </article> <hr> <article> <h3> CVE-2025-27997 - Blizzard Battle.net Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27997 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27997"> read more </a> </article> <hr> <article> <h3> CVE-2025-27998 - Steam Client Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27998 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted executable or DLL. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27998"> read more </a> </article> <hr> <article> <h3> CVE-2025-48200 - TYPO3 sr_feuser_register Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-48200 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48200"> read more </a> </article> <hr> <article> <h3> CVE-2025-48201 - "TYPO3 ns_backup Predictable Resource Location Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48201 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48201"> read more </a> </article> <hr> <article> <h3> CVE-2025-48202 - "TYPO3 femanager Extension Insecure Direct Object Reference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48202 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48202"> read more </a> </article> <hr> <article> <h3> CVE-2025-48203 - TYPO3 cs_seo XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48203 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The cs_seo extension through 9.2.0 for TYPO3 allows XSS. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48203"> read more </a> </article> <hr> <article> <h3> CVE-2025-48204 - TYPO3 ns_backup Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48204 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The ns_backup extension through 13.0.0 for TYPO3 allows command injection. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48204"> read more </a> </article> <hr> <article> <h3> CVE-2025-48205 - TYPO3 sr_feuser_register Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-48205 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48205"> read more </a> </article> <hr> <article> <h3> CVE-2025-48206 - TYPO3 ns_backup XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48206 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The ns_backup extension through 13.0.0 for TYPO3 allows XSS. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48206"> read more </a> </article> <hr> <article> <h3> CVE-2025-48207 - TYPO3 Reint Download Manager Insecure Direct Object Reference (IDOR) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48207 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48207"> read more </a> </article> <hr> <article> <h3> CVE-2025-4008 - Meteobridge Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4008 <br> <strong>Published : </strong> May 21, 2025, 4:15 p.m. | 31 minutes ago <br> <strong>Description : </strong>The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4008"> read more </a> </article> <hr> <article> <h3> CVE-2024-23337 - jq Denial of Service Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-23337 <br> <strong>Published : </strong> May 21, 2025, 3:16 p.m. | 1 hour, 31 minutes ago <br> <strong>Description : </strong>jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-23337"> read more </a> </article> <hr> <article> <h3> CVE-2025-5029 - Kingdee Cloud Galaxy Private Cloud BBC System Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5029 <br> <strong>Published : </strong> May 21, 2025, 3:16 p.m. | 1 hour, 31 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the component File Handler. The manipulation of the argument filePath leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5029"> read more </a> </article> <hr> <article> <h3> CVE-2024-42922 - AAPanel OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42922 <br> <strong>Published : </strong> May 21, 2025, 2:15 p.m. | 2 hours, 31 minutes ago <br> <strong>Description : </strong>AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42922"> read more </a> </article> <hr> <article> <h3> CVE-2024-56429 - itech iLabClient Key Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56429 <br> <strong>Published : </strong> May 21, 2025, 2:15 p.m. | 2 hours, 31 minutes ago <br> <strong>Description : </strong>itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56429"> read more </a> </article> <hr> <article> <h3> CVE-2025-44892 - Fortinet Wireless Access Point Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44892 <br> <strong>Published : </strong> May 21, 2025, 2:15 p.m. | 2 hours, 31 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44892"> read more </a> </article> <hr> <article> <h3> CVE-2025-44895 - D-Link FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44895 <br> <strong>Published : </strong> May 21, 2025, 2:15 p.m. | 2 hours, 31 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44895"> read more </a> </article> <hr> <article> <h3> CVE-2025-1418 - Konsola Proget Profile Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1418 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive information (including their usage in connected devices). This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1418"> read more </a> </article> <hr> <article> <h3> CVE-2025-1419 - Konsola Proget Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1419 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1419"> read more </a> </article> <hr> <article> <h3> CVE-2025-1420 - Konsola Proget Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1420 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>Input provided in a field containing "activationMessage" in Konsola Proget is not sanitized correctly, allowing a high-privileged user to perform a Stored Cross-Site Scripting attack. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1420"> read more </a> </article> <hr> <article> <h3> CVE-2025-1421 - Konsola Proget Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1421 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1421"> read more </a> </article> <hr> <article> <h3> CVE-2025-40775 - BIND DNS Invalid TSIG Algorithm Field Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40775 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40775"> read more </a> </article> <hr> <article> <h3> CVE-2025-48415 - Cisco USB Backdoor Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48415 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48415"> read more </a> </article> <hr> <article> <h3> CVE-2025-48416 - OpenSSH Root Login Hard-Coded Credential Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48416 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48416"> read more </a> </article> <hr> <article> <h3> CVE-2025-48417 - Fortinet SSL Hard-Coded Private Key Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48417 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 3 hours, 31 minutes ago <br> <strong>Description : </strong>The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files. An attacker can use the private key to perform man-in-the-middle attacks against users of the admin interface. The files are located in /etc/ssl (e.g. salia.local.crt, salia.local.key and salia.local.pem). There is no option to upload/configure custom TLS certificates. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48417"> read more </a> </article> <hr> <article> <h3> CVE-2025-1416 - Proget MDM Password Retrieval Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1416 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities restricted by the MDM (Mobile Device Management). For it to happen, they must know the UUIDs of targetted devices, which might be obtained by exploiting CVE-2025-1415 or CVE-2025-1417. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1416"> read more </a> </article> <hr> <article> <h3> CVE-2025-1417 - Proget MDM Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1417 <br> <strong>Published : </strong> May 21, 2025, 1:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by the MDM (Mobile Device Management). This information include user ids, email addresses, first names, last names and device UUIDs. The last one can be used for exploitation of CVE-2025-1416. Successful exploitation requires UUID of a targeted backup, which cannot be brute forced. This issue has been fixed in 2.17.5 version of Konsola Proget (server part of the MDM suite). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1417"> read more </a> </article> <hr> <article> <h3> CVE-2025-41232 - Spring Security Aspects Private Method Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-41232 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: * You are using @EnableMethodSecurity(mode=ASPECTJ) and spring-security-aspects, and * You have Spring Security method annotations on a private method In that case, the target method may be able to be invoked without proper authorization. You are not affected if: * You are not using @EnableMethodSecurity(mode=ASPECTJ) or spring-security-aspects, or * You have no Spring Security-annotated private methods <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41232"> read more </a> </article> <hr> <article> <h3> CVE-2025-48413 - Apache Device Hard-Coded Root Password Backdoor </h3> <p> <strong>CVE ID : </strong>CVE-2025-48413 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device. Authentication can be performed via SSH backdoor or likely via physical access (UART shell). <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48413"> read more </a> </article> <hr> <article> <h3> CVE-2025-48414 - Apache Web Interface Unauthenticated Script Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48414 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48414"> read more </a> </article> <hr> <article> <h3> CVE-2025-4105 - Splitit WordPress Authorized Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4105 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change plugin settings, including changing the environment from sandbox to production and vice versa. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4105"> read more </a> </article> <hr> <article> <h3> CVE-2025-4217 - WordPress YouTube Video Optimizer Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4217 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_youtube' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4217"> read more </a> </article> <hr> <article> <h3> CVE-2025-4219 - WordPress DPEPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4219 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The DPEPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dpe' shortcode in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4219"> read more </a> </article> <hr> <article> <h3> CVE-2025-4221 - WordPress Animated Buttons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4221 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The Animated Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-downloader' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4221"> read more </a> </article> <hr> <article> <h3> CVE-2025-4611 - WordPress Slim SEO Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4611 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim_seo_breadcrumbs shortcode in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4611"> read more </a> </article> <hr> <article> <h3> CVE-2025-4803 - WPPedia PHP Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4803 <br> <strong>Published : </strong> May 21, 2025, 12:16 p.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.0 via deserialization of untrusted input from the 'posttypes' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 12:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4803"> read more </a> </article> <hr> <article> <h3> CVE-2025-5010 - MoonlightL Hexo-Boot Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5010 <br> <strong>Published : </strong> May 21, 2025, 12:15 a.m. | 14 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0. This affects an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the argument Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5010"> read more </a> </article> <hr> <article> <h3> CVE-2025-5011 - MoonlightL Hexo-Boot Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5011 <br> <strong>Published : </strong> May 21, 2025, 12:15 a.m. | 14 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0. This vulnerability affects unknown code of the file /admin/home/index.html of the component Dynamic List Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 21 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5011"> read more </a> </article> <hr> <article> <h3> CVE-2025-4436 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-4436 <br> <strong>Published : </strong> May 20, 2025, 11:15 p.m. | 15 hours, 4 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4436"> read more </a> </article> <hr> <article> <h3> CVE-2025-5004 - "Projectworlds Online Time Table Generator SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5004 <br> <strong>Published : </strong> May 20, 2025, 11:15 p.m. | 15 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add_course.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5004"> read more </a> </article> <hr> <article> <h3> CVE-2025-5006 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5006 <br> <strong>Published : </strong> May 20, 2025, 11:15 p.m. | 15 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/category.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5006"> read more </a> </article> <hr> <article> <h3> CVE-2025-5007 - Part-DB Profile Picture Feature Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-5007 <br> <strong>Published : </strong> May 20, 2025, 11:15 p.m. | 15 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability is the function handleUpload of the file src/Services/Attachments/AttachmentSubmitHandler.php of the component Profile Picture Feature. The manipulation of the argument attachment leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.17.1 is able to address this issue. The identifier of the patch is 2c4f44e808500db19c391159b30cb6142896d415. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5007"> read more </a> </article> <hr> <article> <h3> CVE-2025-5008 - "Projectworlds Online Time Table Generator SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5008 <br> <strong>Published : </strong> May 20, 2025, 11:15 p.m. | 15 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_teacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5008"> read more </a> </article> <hr> <article> <h3> CVE-2025-5001 - GNU PSPP calloc Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5001 <br> <strong>Published : </strong> May 20, 2025, 10:15 p.m. | 16 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5001"> read more </a> </article> <hr> <article> <h3> CVE-2025-5002 - SourceCodester Client Database Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5002 <br> <strong>Published : </strong> May 20, 2025, 10:15 p.m. | 16 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_proposal_update_order.php. The manipulation of the argument order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5002"> read more </a> </article> <hr> <article> <h3> CVE-2025-5003 - Projectworlds Online Time Table Generator SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-5003 <br> <strong>Published : </strong> May 20, 2025, 10:15 p.m. | 16 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /semester_ajax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5003"> read more </a> </article> <hr> <article> <h3> CVE-2025-44880 - Wavlink WL-WN579A3 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44880 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44880"> read more </a> </article> <hr> <article> <h3> CVE-2025-44882 - Wavlink Firewall CGI Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-44882 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44882"> read more </a> </article> <hr> <article> <h3> CVE-2025-44883 - D-Link FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44883 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44883"> read more </a> </article> <hr> <article> <h3> CVE-2025-44891 - "FW-WGS-804HPT Stack Overflow via Host IP Parameter" </h3> <p> <strong>CVE ID : </strong>CVE-2025-44891 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44891"> read more </a> </article> <hr> <article> <h3> CVE-2025-44894 - Fortinet Wireless WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44894 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44894"> read more </a> </article> <hr> <article> <h3> CVE-2025-44896 - Fujitsu WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44896 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44896"> read more </a> </article> <hr> <article> <h3> CVE-2025-44897 - Fiberhome FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44897 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44897"> read more </a> </article> <hr> <article> <h3> CVE-2025-44898 - Fortinet Wireless Access Point Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44898 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44898"> read more </a> </article> <hr> <article> <h3> CVE-2025-4998 - H3C Magic R200G HTTP POST Request Handler Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4998 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in H3C Magic R200G up to 100R002 and classified as problematic. Affected by this vulnerability is the function Edit_BasicSSID/Edit_BasicSSID_5G/SetAPWifiorLedInfoById/SetMobileAPInfoById/Asp_SetTimingtimeWifiAndLed/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4998"> read more </a> </article> <hr> <article> <h3> CVE-2025-4999 - Linksys FGW3000 HTTP POST Request Handler Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4999 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected by this issue is the function sub_4153FC of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler. The manipulation of the argument supplicant_rnd_id_en leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4999"> read more </a> </article> <hr> <article> <h3> CVE-2025-5000 - "Linksys FGW3000 HTTP POST Request Handler Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-5000 <br> <strong>Published : </strong> May 20, 2025, 9:15 p.m. | 17 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000. It has been classified as critical. This affects the function control_panel_sw of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler. The manipulation of the argument filename leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-5000"> read more </a> </article> <hr> <article> <h3> CVE-2025-44890 - Foresight Wireless FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44890 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 18 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44890"> read more </a> </article> <hr> <article> <h3> CVE-2025-44893 - Fortinet Web Application Firewall Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44893 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 18 hours, 4 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt_Rules_Apply_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44893"> read more </a> </article> <hr> <article> <h3> CVE-2025-48056 - Hubble CLI Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48056 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 18 hours, 4 minutes ago <br> <strong>Description : </strong>Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output. This could be leveraged to conceal log entries, rewrite output, or even make the terminal temporarily unusable. Exploitation of this attack would require the victim to be monitoring Kafka traffic using Layer 7 Protocol Visibility at the time of the attack. The issue is patched in Hubble CLI v1.17.2. Hubble CLI users who are unable to upgrade can direct their Hubble flows to a log file and inspect the output within a text editor. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48056"> read more </a> </article> <hr> <article> <h3> CVE-2025-4997 - H3C R2+ProG HTTP POST Request Handler Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4997 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 18 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/Edit_BasicSSID/Edit_GuestSSIDFor2P4G/Edit_BasicSSID_5G/SetAPInfoById of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4997"> read more </a> </article> <hr> <article> <h3> CVE-2025-44887 - Fujitsu Workstation WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44887 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44887"> read more </a> </article> <hr> <article> <h3> CVE-2025-44888 - Foresight Wireless FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44888 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44888"> read more </a> </article> <hr> <article> <h3> CVE-2025-44881 - Wavlink WL-WN579A3 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44881 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted input. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44881"> read more </a> </article> <hr> <article> <h3> CVE-2025-44884 - D-Link FW-WGS-804HPT Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44884 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44884"> read more </a> </article> <hr> <article> <h3> CVE-2025-44885 - Fortinet Wireless Access Point Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44885 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44885"> read more </a> </article> <hr> <article> <h3> CVE-2025-44886 - Fortinet Wireless AP Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44886 <br> <strong>Published : </strong> May 20, 2025, 8:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44886"> read more </a> </article> <hr> <article> <h3> CVE-2025-47290 - Containerd TOCTOU File System Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47290 <br> <strong>Published : </strong> May 20, 2025, 7:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47290"> read more </a> </article> <hr> <article> <h3> CVE-2025-4996 - Intelbras RF 301K Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4996 <br> <strong>Published : </strong> May 20, 2025, 7:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Add Static IP. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4996"> read more </a> </article> <hr> <article> <h3> CVE-2025-48391 - JetBrains YouTrack Unauthenticated Issue Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48391 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48391"> read more </a> </article> <hr> <article> <h3> CVE-2025-4364 - Apache HTTP Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4364 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4364"> read more </a> </article> <hr> <article> <h3> CVE-2025-22157 - Atlassian Jira Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22157 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged user. Atlassian recommends that Jira Core Data Center and Server and Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Jira Core Data Center and Server 9.12: Upgrade to a release greater than or equal to 9.12.20 Jira Service Management Data Center and Server 5.12: Upgrade to a release greater than or equal to 5.12.20 Jira Core Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Service Management Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Core Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Service Management Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Core Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1 Jira Service Management Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1 See the release notes. You can download the latest version of Jira Core Data Center and Jira Service Management Data Center from the download center. This vulnerability was reported via our Atlassian (Internal) program. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22157"> read more </a> </article> <hr> <article> <h3> CVE-2025-37983 - Linux kernel qibfs Dentry Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-37983 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry... this one had been there since the initial merge; to be fair, if we are that far OOM, the odds of failing at that particular allocation are low... <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37983"> read more </a> </article> <hr> <article> <h3> CVE-2025-37984 - Linux Kernel ECDsa Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37984 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation's ->key_size() callback returns an unusually large value. Herbert instead suggests (for a division by 8): X / 8 + !!(X & 7) Based on this formula, introduce a generic DIV_ROUND_UP_POW2() macro and use it in lieu of DIV_ROUND_UP() for ->key_size() return values. Additionally, use the macro in ecc_digits_from_bytes(), whose "nbytes" parameter is a ->key_size() return value in some instances, or a user-specified ASN.1 length in the case of ecdsa_get_signature_rs(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37984"> read more </a> </article> <hr> <article> <h3> CVE-2025-37985 - Linux Kernel USB Wdm Wwan Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-37985 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE must be the last action or we can open a chardev whose URBs are still poisoned <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37985"> read more </a> </article> <hr> <article> <h3> CVE-2025-37986 - "USB Type-C: Invalid Pointer Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37986 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers on partner unregistration To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a clean state for future connections. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37986"> read more </a> </article> <hr> <article> <h3> CVE-2025-37987 - Linux PDS Core AdminQ Overflow/Stuck Condition Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37987 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is protected by the adminq_lock, which prevents more than 1 command to be posted onto it at any one time. This makes it so the client drivers cannot simultaneously post adminq commands. However, the completions happen in a different context, which means multiple adminq commands can be posted sequentially and all waiting on completion. On the FW side, the backing adminq request queue is only 16 entries long and the retry mechanism and/or overflow/stuck prevention is lacking. This can cause the adminq to get stuck, so commands are no longer processed and completions are no longer sent by the FW. As an initial fix, prevent more than 16 outstanding adminq commands so there's no way to cause the adminq from getting stuck. This works because the backing adminq request queue will never have more than 16 pending adminq commands, so it will never overflow. This is done by reducing the adminq depth to 16. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37987"> read more </a> </article> <hr> <article> <h3> CVE-2025-37988 - Apache Linux Kernel Mount Namespace Locking races </h3> <p> <strong>CVE ID : </strong>CVE-2025-37988 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() Normally do_lock_mount(path, _) is locking a mountpoint pinned by *path and at the time when matching unlock_mount() unlocks that location it is still pinned by the same thing. Unfortunately, for 'beneath' case it's no longer that simple - the object being locked is not the one *path points to. It's the mountpoint of path->mnt. The thing is, without sufficient locking ->mnt_parent may change under us and none of the locks are held at that point. The rules are * mount_lock stabilizes m->mnt_parent for any mount m. * namespace_sem stabilizes m->mnt_parent, provided that m is mounted. * if either of the above holds and refcount of m is positive, we are guaranteed the same for refcount of m->mnt_parent. namespace_sem nests inside inode_lock(), so do_lock_mount() has to take inode_lock() before grabbing namespace_sem. It does recheck that path->mnt is still mounted in the same place after getting namespace_sem, and it does take care to pin the dentry. It is needed, since otherwise we might end up with racing mount --move (or umount) happening while we were getting locks; in that case dentry would no longer be a mountpoint and could've been evicted on memory pressure along with its inode - not something you want when grabbing lock on that inode. However, pinning a dentry is not enough - the matching mount is also pinned only by the fact that path->mnt is mounted on top it and at that point we are not holding any locks whatsoever, so the same kind of races could end up with all references to that mount gone just as we are about to enter inode_lock(). If that happens, we are left with filesystem being shut down while we are holding a dentry reference on it; results are not pretty. What we need to do is grab both dentry and mount at the same time; that makes inode_lock() safe *and* avoids the problem with fs getting shut down under us. After taking namespace_sem we verify that path->mnt is still mounted (which stabilizes its ->mnt_parent) and check that it's still mounted at the same place. From that point on to the matching namespace_unlock() we are guaranteed that mount/dentry pair we'd grabbed are also pinned by being the mountpoint of path->mnt, so we can quietly drop both the dentry reference (as the current code does) and mnt one - it's OK to do under namespace_sem, since we are not dropping the final refs. That solves the problem on do_lock_mount() side; unlock_mount() also has one, since dentry is guaranteed to stay pinned only until the namespace_unlock(). That's easy to fix - just have inode_unlock() done earlier, while it's still pinned by mp->m_dentry. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37988"> read more </a> </article> <hr> <article> <h3> CVE-2025-37989 - Linux Kernel Phy LED Trigger Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37989 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory condition, which was traced to a memory leak in the PHY LED trigger code. The root cause is misuse of the devm API. The registration function (phy_led_triggers_register) is called from phy_attach_direct, not phy_probe, and the unregister function (phy_led_triggers_unregister) is called from phy_detach, not phy_remove. This means the register and unregister functions can be called multiple times for the same PHY device, but devm-allocated memory is not freed until the driver is unbound. This also prevents kmemleak from detecting the leak, as the devm API internally stores the allocated pointer. Fix this by replacing devm_kzalloc/devm_kcalloc with standard kzalloc/kcalloc, and add the corresponding kfree calls in the unregister path. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37989"> read more </a> </article> <hr> <article> <h3> CVE-2025-37990 - "Broadcom brcm80211 WiFi Linux Kernel Uninitialized Variable Use" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37990 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the function brcmf_usb_dl_cmd() fails. It is dangerous to use uninitialized variables in the conditions. Add error handling for brcmf_usb_dl_cmd() to jump to error handling path if the brcmf_usb_dl_cmd() fails and the 'state.state' and the 'state.bytes' are uninitialized. Improve the error message to report more detailed error information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37990"> read more </a> </article> <hr> <article> <h3> CVE-2025-37991 - HP parisc SIGFPE Double Crash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37991 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in fpe_func almost immediately. When the T bit is set, an assist exception trap occurs when when the co-processor encounters *any* floating-point instruction except for a double store of register %fr0. The latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register before returning to the signal handler in userspace. The issue can be reproduced with this test program: root@parisc:~# cat fpe.c static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set; sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d with si_code %ld\n", sig, i->si_code); } int main() { struct sigaction action = { .sa_sigaction = fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW); return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); } root@parisc:~# gcc fpe.c -lm root@parisc:~# ./a.out Floating point exception root@parisc:~# strace -f ./a.out execve("./a.out", ["./a.out"], 0xf9ac7034 /* 20 vars */) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed by SIGFPE +++ Floating point exception <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37991"> read more </a> </article> <hr> <article> <h3> CVE-2025-46724 - Langroid TableChatAgent Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46724 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46724"> read more </a> </article> <hr> <article> <h3> CVE-2025-46725 - Langroid LanceDocChatAgent Pandas Evaluator Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46725 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the host system. Langroid 0.53.15 sanitizes input to the affected function by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46725"> read more </a> </article> <hr> <article> <h3> CVE-2025-47277 - NVIDIA vLLM Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47277 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `PyNcclPipe` KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of the `PyNcclPipe` class to establish a peer-to-peer communication domain for data transmission between distributed nodes. The GPU-side KV-Cache transmission is implemented through the `PyNcclCommunicator` class, while CPU-side control message passing is handled via the `send_obj` and `recv_obj` methods on the CPU side. The intention was that this interface should only be exposed to a private network using the IP address specified by the `--kv-ip` CLI parameter. The vLLM documentation covers how this must be limited to a secured network. The default and intentional behavior from PyTorch is that the `TCPStore` interface listens on ALL interfaces, regardless of what IP address is provided. The IP address given was only used as a client-side address to use. vLLM was fixed to use a workaround to force the `TCPStore` instance to bind its socket to a specified private interface. As of version 0.8.5, vLLM limits the `TCPStore` socket to the private interface as configured. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47277"> read more </a> </article> <hr> <article> <h3> CVE-2025-47850 - JetBrains YouTrack Attachment Visibility Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47850 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47850"> read more </a> </article> <hr> <article> <h3> CVE-2025-47851 - JetBrains TeamCity Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47851 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47851"> read more </a> </article> <hr> <article> <h3> CVE-2025-47852 - JetBrains TeamCity Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47852 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47852"> read more </a> </article> <hr> <article> <h3> CVE-2025-47853 - JetBrains TeamCity Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47853 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47853"> read more </a> </article> <hr> <article> <h3> CVE-2025-47854 - JetBrains TeamCity Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47854 <br> <strong>Published : </strong> May 20, 2025, 6:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47854"> read more </a> </article> <hr> <article> <h3> CVE-2025-37981 - SmartPQi Linux Kernel Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37981 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi driver checks the reset_devices variable to determine whether special adjustments need to be made for kdump. This has the effect that after a regular kexec reboot, some driver parameters such as max_transfer_size are much lower than usual. More importantly, kexec reboot tests have revealed memory corruption caused by the driver log being written to system memory after a kexec. Fix this by testing is_kdump_kernel() rather than reset_devices where appropriate. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37981"> read more </a> </article> <hr> <article> <h3> CVE-2025-37982 - "Qualcomm Atheros Linux Kernel Memory Leak" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37982 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37982"> read more </a> </article> <hr> <article> <h3> CVE-2025-44084 - D-Link DI-8100 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44084 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44084"> read more </a> </article> <hr> <article> <h3> CVE-2025-37979 - Qualcomm ASoC qcom Linux Kernel Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-37979 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()). Redefine LPASS_MAX_PORTS to consider the maximum possible port id for q6dsp as sc7280 driver utilizes some of those values. Found by Linux Verification Center (linuxtesting.org) with SVACE. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37979"> read more </a> </article> <hr> <article> <h3> CVE-2025-37980 - Linux Kernel Block Driver Resource Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37980 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function later encounters an error, we need to clean up the blk_mq_sysfs resources. Add the missing blk_mq_sysfs_unregister() call in the error path to properly clean up these resources and prevent a memory leak. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37980"> read more </a> </article> <hr> <article> <h3> CVE-2025-37965 - AMD Display FPU Invalid Context Use-After-Free </h3> <p> <strong>CVE ID : </strong>CVE-2025-37965 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping function called from invalid context" error. after: "drm/amd/display: Protect FPU in dml2_validate()/dml21_validate()" The populate_dml_plane_cfg_from_plane_state() uses the GFP_KERNEL flag for memory allocation, which shouldn't be used in atomic contexts. The allocation is needed only for using another helper function get_scaler_data_for_plane(). [How] Modify helpers to pass a pointer to scaler_data within existing context, eliminating the need for dynamic memory allocation/deallocation and copying. (cherry picked from commit bd3e84bc98f81b44f2c43936bdadc3241d654259) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37965"> read more </a> </article> <hr> <article> <h3> CVE-2025-37966 - RISC-V Linux PR_SET_TAGGED_ADDR_CTRL Kernel Crash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37966 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL When userspace does PR_SET_TAGGED_ADDR_CTRL, but Supm extension is not available, the kernel crashes: Oops - illegal instruction [#1] [snip] epc : set_tagged_addr_ctrl+0x112/0x15a ra : set_tagged_addr_ctrl+0x74/0x15a epc : ffffffff80011ace ra : ffffffff80011a30 sp : ffffffc60039be10 [snip] status: 0000000200000120 badaddr: 0000000010a79073 cause: 0000000000000002 set_tagged_addr_ctrl+0x112/0x15a __riscv_sys_prctl+0x352/0x73c do_trap_ecall_u+0x17c/0x20c andle_exception+0x150/0x15c Fix it by checking if Supm is available. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37966"> read more </a> </article> <hr> <article> <h3> CVE-2025-37967 - Linux Kernel USB Type-C UCSI DisplayPort Deadlock Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37967 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_mutex_lock / ucsi_con_mutex_unlock functions to the UCSI driver. ucsi_con_mutex_lock ensures the connector mutex is only locked if a connection is established and the partner pointer is valid. This resolves a deadlock scenario where ucsi_displayport_remove_partner holds con->mutex waiting for dp_altmode_work to complete while dp_altmode_work attempts to acquire it. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37967"> read more </a> </article> <hr> <article> <h3> CVE-2025-37968 - Linux Kernel IIO Light Opt3001 Deadlock Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37968 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function in this driver is reading the flag twice: once to lock a mutex and once to unlock it. Even though the code setting the flag is designed to prevent it, there are subtle cases where the flag could be true at the mutex_lock stage and false at the mutex_unlock stage. This results in the mutex not being unlocked, resulting in a deadlock. Fix it by making the opt3001_irq() code generally more robust, reading the flag into a variable and using the variable value at both stages. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37968"> read more </a> </article> <hr> <article> <h3> CVE-2025-37969 - Linux Kernel: st_lsm6dsx Infinite Loop Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37969 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Prevent st_lsm6dsx_read_tagged_fifo from falling in an infinite loop in case pattern_len is equal to zero and the device FIFO is not empty. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37969"> read more </a> </article> <hr> <article> <h3> CVE-2025-37970 - Linux Kernel IIO IMU st_lsm6dsx Infinite Loop Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37970 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Prevent st_lsm6dsx_read_fifo from falling in an infinite loop in case pattern_len is equal to zero and the device FIFO is not empty. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37970"> read more </a> </article> <hr> <article> <h3> CVE-2025-37971 - Raspberry Pi bcm2835-camera Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37971 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("staging: vc04_services: Move global g_state to vchiq_state") changed mmal_init to pass dev->v4l2_dev.dev to vchiq_mmal_init, however nothing iniitialised dev->v4l2_dev, so we got a NULL pointer dereference. Set dev->v4l2_dev.dev during bcm2835_mmal_probe. The device pointer could be passed into v4l2_device_register to set it, however that also has other effects that would need additional changes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37971"> read more </a> </article> <hr> <article> <h3> CVE-2025-37972 - Mediatek Linux Kernel Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37972 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_probe, the regs parameter is only set if the button is parsed in the device tree. However, on hardware where the button is left floating, that node will most likely be removed not to enable that input. In that case the code will try to dereference a null pointer. Let's use the regs struct instead as it is defined for all supported platforms. Note that it is ok setting the key reg even if that latter is disabled as the interrupt won't be enabled anyway. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37972"> read more </a> </article> <hr> <article> <h3> CVE-2025-37973 - Cisco Wireless Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37973 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Currently during the multi-link element defragmentation process, the multi-link element length added to the total IEs length when calculating the length of remaining IEs after the multi-link element in cfg80211_defrag_mle(). This could lead to out-of-bounds access if the multi-link element or its corresponding fragment elements are the last elements in the IEs buffer. To address this issue, correctly calculate the remaining IEs length by deducting the multi-link element end offset from total IEs end offset. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37973"> read more </a> </article> <hr> <article> <h3> CVE-2025-37974 - Linux kernel s390 PCI Missing Check Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37974 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The zpci_create_device() function returns an error pointer that needs to be checked before dereferencing it as a struct zpci_dev pointer. Add the missing check in __clp_add() where it was missed when adding the scan_list in the fixed commit. Simply not adding the device to the scan list results in the previous behavior. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37974"> read more </a> </article> <hr> <article> <h3> CVE-2025-37975 - RISC-V Module Out-of-Bounds Relocation Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-37975 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to access one element past the end of the relocation section. Simplify to num_relocations which is equivalent to the existing size expression. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37975"> read more </a> </article> <hr> <article> <h3> CVE-2025-37976 - "Qualcomm ath12k WiFi Destination Ring Entry Fetch Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37976 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process [ Upstream commit 63fdc4509bcf483e79548de6bc08bf3c8e504bb3 ] Currently, ath12k_dp_mon_srng_process uses ath12k_hal_srng_src_get_next_entry to fetch the next entry from the destination ring. This is incorrect because ath12k_hal_srng_src_get_next_entry is intended for source rings, not destination rings. This leads to invalid entry fetches, causing potential data corruption or crashes due to accessing incorrect memory locations. This happens because the source ring and destination ring have different handling mechanisms and using the wrong function results in incorrect pointer arithmetic and ring management. To fix this issue, replace the call to ath12k_hal_srng_src_get_next_entry with ath12k_hal_srng_dst_get_next_entry in ath12k_dp_mon_srng_process. This ensures that the correct function is used for fetching entries from the destination ring, preventing invalid memory accesses. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1 Tested-on: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37976"> read more </a> </article> <hr> <article> <h3> CVE-2025-37977 - Samsung UFS DMA Coherent Property Vulnerability (Information Disclosure) </h3> <p> <strong>CVE ID : </strong>CVE-2025-37977 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set If dma-coherent property isn't set then descriptors are non-cacheable and the iocc shareability bits should be disabled. Without this UFS can end up in an incompatible configuration and suffer from random cache related stability issues. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37977"> read more </a> </article> <hr> <article> <h3> CVE-2025-37978 - Linux Kernel Block Integrity Oops </h3> <p> <strong>CVE ID : </strong>CVE-2025-37978 <br> <strong>Published : </strong> May 20, 2025, 5:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple protection information buffers inside the same page can lead to oopses because set_page_dirty_lock() can't be called from interrupt context. Since a protection information buffer is not backed by a file there is no point in setting its page dirty, there is nothing to synchronize. Drop the call to set_page_dirty_lock() and remove the last argument to bio_integrity_unpin_bvec(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37978"> read more </a> </article> <hr> <article> <h3> CVE-2025-37964 - Linux Kernel: Intel X86 TLB Flush Inadvertent Skipping Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37964 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr: There is a window in the mm switching code where the new CR3 is set and the CPU should be getting TLB flushes for the new mm. But should_flush_tlb() has a bug and suppresses the flush. Fix it by widening the window where should_flush_tlb() sends an IPI. Long Version: === History === There were a few things leading up to this. First, updating mm_cpumask() was observed to be too expensive, so it was made lazier. But being lazy caused too many unnecessary IPIs to CPUs due to the now-lazy mm_cpumask(). So code was added to cull mm_cpumask() periodically[2]. But that culling was a bit too aggressive and skipped sending TLB flushes to CPUs that need them. So here we are again. === Problem === The too-aggressive code in should_flush_tlb() strikes in this window: // Turn on IPIs for this CPU/mm combination, but only // if should_flush_tlb() agrees: cpumask_set_cpu(cpu, mm_cpumask(next)); next_tlb_gen = atomic64_read(&next->context.tlb_gen); choose_new_asid(next, next_tlb_gen, &new_asid, &need_flush); load_new_mm_cr3(need_flush); // ^ After 'need_flush' is set to false, IPIs *MUST* // be sent to this CPU and not be ignored. this_cpu_write(cpu_tlbstate.loaded_mm, next); // ^ Not until this point does should_flush_tlb() // become true! should_flush_tlb() will suppress TLB flushes between load_new_mm_cr3() and writing to 'loaded_mm', which is a window where they should not be suppressed. Whoops. === Solution === Thankfully, the fuzzy "just about to write CR3" window is already marked with loaded_mm==LOADED_MM_SWITCHING. Simply checking for that state in should_flush_tlb() is sufficient to ensure that the CPU is targeted with an IPI. This will cause more TLB flush IPIs. But the window is relatively small and I do not expect this to cause any kind of measurable performance impact. Update the comment where LOADED_MM_SWITCHING is written since it grew yet another user. Peter Z also raised a concern that should_flush_tlb() might not observe 'loaded_mm' and 'is_lazy' in the same order that switch_mm_irqs_off() writes them. Add a barrier to ensure that they are observed in the order they are written. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37964"> read more </a> </article> <hr> <article> <h3> CVE-2025-48014 - Apache Directory LDAP Authentication Password Guessing Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48014 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>Password guessing limits could be bypassed when using LDAP authentication. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48014"> read more </a> </article> <hr> <article> <h3> CVE-2025-48015 - Apache Stratosphere Authentication Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48015 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>Failed login response could be different depending on whether the username was local or central. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48015"> read more </a> </article> <hr> <article> <h3> CVE-2025-48016 - Cisco OpenFlow Discovery Protocol Resource Exhaustion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48016 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>OpenFlow discovery protocol can exhaust resources because it is not rate limited <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48016"> read more </a> </article> <hr> <article> <h3> CVE-2025-48017 - Apache Circuit File Upload Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-48017 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48017"> read more </a> </article> <hr> <article> <h3> CVE-2025-48018 - Adobe ColdFusion Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48018 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>An authenticated user can modify application state data. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48018"> read more </a> </article> <hr> <article> <h3> CVE-2025-37945 - Linux Kernel: Phylink-Controlled PHY State Machine Not Stopped on Suspend and Started on Resume </h3> <p> <strong>CVE ID : </strong>CVE-2025-37945 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsa_switch_suspend() and dsa_switch_resume() from their device PM ops: qca8k-8xxx, bcm_sf2, microchip ksz 2. Those who don't: all others. The above methods should be optional. For type 1, dsa_switch_suspend() calls dsa_user_suspend() -> phylink_stop(), and dsa_switch_resume() calls dsa_user_resume() -> phylink_start(). These seem good candidates for setting mac_managed_pm = true because that is essentially its definition [1], but that does not seem to be the biggest problem for now, and is not what this change focuses on. Talking strictly about the 2nd category of DSA drivers here (which do not have MAC managed PM, meaning that for their attached PHYs, mdio_bus_phy_suspend() and mdio_bus_phy_resume() should run in full), I have noticed that the following warning from mdio_bus_phy_resume() is triggered: WARN_ON(phydev->state != PHY_HALTED && phydev->state != PHY_READY && phydev->state != PHY_UP); because the PHY state machine is running. It's running as a result of a previous dsa_user_open() -> ... -> phylink_start() -> phy_start() having been initiated by the user. The previous mdio_bus_phy_suspend() was supposed to have called phy_stop_machine(), but it didn't. So this is why the PHY is in state PHY_NOLINK by the time mdio_bus_phy_resume() runs. mdio_bus_phy_suspend() did not call phy_stop_machine() because for phylink, the phydev->adjust_link function pointer is NULL. This seems a technicality introduced by commit fddd91016d16 ("phylib: fix PAL state machine restart on resume"). That commit was written before phylink existed, and was intended to avoid crashing with consumer drivers which don't use the PHY state machine - phylink always does, when using a PHY. But phylink itself has historically not been developed with suspend/resume in mind, and apparently not tested too much in that scenario, allowing this bug to exist unnoticed for so long. Plus, prior to the WARN_ON(), it would have likely been invisible. This issue is not in fact restricted to type 2 DSA drivers (according to the above ad-hoc classification), but can be extrapolated to any MAC driver with phylink and MDIO-bus-managed PHY PM ops. DSA is just where the issue was reported. Assuming mac_managed_pm is set correctly, a quick search indicates the following other drivers might be affected: $ grep -Zlr PHYLINK_NETDEV drivers/ | xargs -0 grep -L mac_managed_pm drivers/net/ethernet/atheros/ag71xx.c drivers/net/ethernet/microchip/sparx5/sparx5_main.c drivers/net/ethernet/microchip/lan966x/lan966x_main.c drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c drivers/net/ethernet/freescale/dpaa/dpaa_eth.c drivers/net/ethernet/freescale/ucc_geth.c drivers/net/ethernet/freescale/enetc/enetc_pf_common.c drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c drivers/net/ethernet/marvell/mvneta.c drivers/net/ethernet/marvell/prestera/prestera_main.c drivers/net/ethernet/mediatek/mtk_eth_soc.c drivers/net/ethernet/altera/altera_tse_main.c drivers/net/ethernet/wangxun/txgbe/txgbe_phy.c drivers/net/ethernet/meta/fbnic/fbnic_phylink.c drivers/net/ethernet/tehuti/tn40_phy.c drivers/net/ethernet/mscc/ocelot_net.c Make the existing conditions dependent on the PHY device having a phydev->phy_link_change() implementation equal to the default phy_link_change() provided by phylib. Otherwise, we implicitly know that the phydev has the phylink-provided phylink_phy_change() callback, and when phylink is used, the PHY state machine always needs to be stopped/ started on the suspend/resume path. The code is structured as such that if phydev->phy_link_change() is absent, it is a matter of time until the kernel will crash - no need to further complicate the test. Thus, for the situation where the PM is not managed b ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37945"> read more </a> </article> <hr> <article> <h3> CVE-2025-37946 - IBM s390 PCI Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37946 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") the code to ignore power off of a PF that has child VFs was changed from a direct return to a goto to the unlock and pci_dev_put() section. The change however left the existing pci_dev_put() untouched resulting in a doubple put. This can subsequently cause a use after free if the struct pci_dev is released in an unexpected state. Fix this by removing the extra pci_dev_put(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37946"> read more </a> </article> <hr> <article> <h3> CVE-2025-37947 - Linux Kernel ksmbd Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37947 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data length (v_len). If *pos was greater than or equal to v_len, this could lead to an out-of-bounds memory write. This patch adds a check to ensure *pos is less than v_len before proceeding. If the condition fails, -EINVAL is returned. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37947"> read more </a> </article> <hr> <article> <h3> CVE-2025-37948 - "Linux Kernel Arm64 BPF Branch History Manipulation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37948 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next. On exit from a BPF program, emit the BHB mititgation sequence. This is only applied for 'classic' cBPF programs that are loaded by seccomp. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37948"> read more </a> </article> <hr> <article> <h3> CVE-2025-37949 - Xenbus Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37949 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbus_thread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: e030:__wake_up_common+0x4c/0x180 Call Trace: <TASK> __wake_up_common_lock+0x82/0xd0 process_msg+0x18e/0x2f0 xenbus_thread+0x165/0x1c0 process_msg+0x18e is req->cb(req). req->cb is set to xs_wake_up(), a thin wrapper around wake_up(), or xenbus_dev_queue_reply(). It seems like it was xs_wake_up() in this case. It seems like req may have woken up the xs_wait_for_reply(), which kfree()ed the req. When xenbus_thread resumes, it faults on the zero-ed data. Linux Device Drivers 2nd edition states: "Normally, a wake_up call can cause an immediate reschedule to happen, meaning that other processes might run before wake_up returns." ... which would match the behaviour observed. Change to keeping two krefs on each request. One for the caller, and one for xenbus_thread. Each will kref_put() when finished, and the last will free it. This use of kref matches the description in Documentation/core-api/kref.rst <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37949"> read more </a> </article> <hr> <article> <h3> CVE-2025-37950 - Linux Kernel Ocfs2 Panic Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37950 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure and call the folio array free code. The folio array free code expects either valid folio pointers or NULL. Finding the -ENOMEM will result in a panic. Fix by NULLing the error folio entry. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37950"> read more </a> </article> <hr> <article> <h3> CVE-2025-37951 - Linux Kernel - Memory Leak in DRM/V3D Driver </h3> <p> <strong>CVE ID : </strong>CVE-2025-37951 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we check if the GPU has made any progress since the last timeout. If so, instead of resetting the hardware, we skip the reset and let the timer get rearmed. This gives long-running jobs a chance to complete. However, when `timedout_job()` is called, the job in question is removed from the pending list, which means it won't be automatically freed through `free_job()`. Consequently, when we skip the reset and keep the job running, the job won't be freed when it finally completes. This situation leads to a memory leak, as exposed in [1] and [2]. Similarly to commit 704d3d60fec4 ("drm/etnaviv: don't block scheduler when GPU is still active"), this patch ensures the job is put back on the pending list when extending the timeout. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37951"> read more </a> </article> <hr> <article> <h3> CVE-2025-37952 - Samba Linux Kernel Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37952 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destroys the file via __ksmbd_close_fd while another thread holds a reference to it. The existing checks on fp->refcount are not sufficient to prevent this. The fix takes ft->lock around the section which removes the file from the file table. This prevents two threads acquiring the same file pointer via __close_file_table_ids, as well as the other functions which retrieve a file from the IDR and which already use this same lock. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37952"> read more </a> </article> <hr> <article> <h3> CVE-2025-37953 - Linux Kernel sch HTB NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37953 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan reported a NULL pointer dereference in htb_next_rb_node() after we made htb_qlen_notify() idempotent. It turns out in the following case it introduced some regression: htb_dequeue_tree(): |-> fq_codel_dequeue() |-> qdisc_tree_reduce_backlog() |-> htb_qlen_notify() |-> htb_deactivate() |-> htb_next_rb_node() |-> htb_deactivate() For htb_next_rb_node(), after calling the 1st htb_deactivate(), the clprio[prio]->ptr could be already set to NULL, which means htb_next_rb_node() is vulnerable here. For htb_deactivate(), although we checked qlen before calling it, in case of qlen==0 after qdisc_tree_reduce_backlog(), we may call it again which triggers the warning inside. To fix the issues here, we need to: 1) Make htb_deactivate() idempotent, that is, simply return if we already call it before. 2) Make htb_next_rb_node() safe against ptr==NULL. Many thanks to Alan for testing and for the reproducer. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37953"> read more </a> </article> <hr> <article> <h3> CVE-2025-37954 - Samba Linux Kernel Dentry Reference Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37954 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs. Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37954"> read more </a> </article> <hr> <article> <h3> CVE-2025-37955 - Virtio Net Linux Kernel Unreferenced Object Memory Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-37955 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnet_xsk_pool_enable(): unreferenced object 0xffff88800a68a000 (size 2048): comm "xdp_helper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): __kvmalloc_node_noprof+0x402/0x570 virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882) xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226) xsk_bind+0x6a5/0x1ae0 __sys_bind+0x15e/0x230 __x64_sys_bind+0x72/0xb0 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37955"> read more </a> </article> <hr> <article> <h3> CVE-2025-37956 - Samba Linux Kernel Empty Rename Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37956 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from d_alloc. This patch return the error when attempting to rename a file or directory with an empty new name string. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37956"> read more </a> </article> <hr> <article> <h3> CVE-2025-37957 - KVM SVM SMM Shutdown Interception Forced Exit </h3> <p> <strong>CVE ID : </strong>CVE-2025-37957 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit ed129ec9057f ("KVM: x86: forcibly leave nested mode on vCPU reset") addressed an issue where a triple fault occurring in nested mode could lead to use-after-free scenarios. However, the commit did not handle the analogous situation for System Management Mode (SMM). This omission results in triggering a WARN when KVM forces a vCPU INIT after SHUTDOWN interception while the vCPU is in SMM. This situation was reprodused using Syzkaller by: 1) Creating a KVM VM and vCPU 2) Sending a KVM_SMI ioctl to explicitly enter SMM 3) Executing invalid instructions causing consecutive exceptions and eventually a triple fault The issue manifests as follows: WARNING: CPU: 0 PID: 25506 at arch/x86/kvm/x86.c:12112 kvm_vcpu_reset+0x1d2/0x1530 arch/x86/kvm/x86.c:12112 Modules linked in: CPU: 0 PID: 25506 Comm: syz-executor.0 Not tainted 6.1.130-syzkaller-00157-g164fe5dde9b6 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:kvm_vcpu_reset+0x1d2/0x1530 arch/x86/kvm/x86.c:12112 Call Trace: <TASK> shutdown_interception+0x66/0xb0 arch/x86/kvm/svm/svm.c:2136 svm_invoke_exit_handler+0x110/0x530 arch/x86/kvm/svm/svm.c:3395 svm_handle_exit+0x424/0x920 arch/x86/kvm/svm/svm.c:3457 vcpu_enter_guest arch/x86/kvm/x86.c:10959 [inline] vcpu_run+0x2c43/0x5a90 arch/x86/kvm/x86.c:11062 kvm_arch_vcpu_ioctl_run+0x50f/0x1cf0 arch/x86/kvm/x86.c:11283 kvm_vcpu_ioctl+0x570/0xf00 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4122 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x19a/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Architecturally, INIT is blocked when the CPU is in SMM, hence KVM's WARN() in kvm_vcpu_reset() to guard against KVM bugs, e.g. to detect improper emulation of INIT. SHUTDOWN on SVM is a weird edge case where KVM needs to do _something_ sane with the VMCB, since it's technically undefined, and INIT is the least awful choice given KVM's ABI. So, double down on stuffing INIT on SHUTDOWN, and force the vCPU out of SMM to avoid any weirdness (and the WARN). Found by Linux Verification Center (linuxtesting.org) with Syzkaller. [sean: massage changelog, make it clear this isn't architectural behavior] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37957"> read more </a> </article> <hr> <article> <h3> CVE-2025-37958 - Linux Kernel Huge Memory PMD Migration Entry Invalid Address Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37958 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent this invalid access, it is necessary to check the PMD migration entry and return early. In this context, there is no need to use pmd_to_swp_entry and pfn_swap_entry_to_page to verify the equality of the target folio. Since the PMD migration entry is locked, it cannot be served as the target. Mailing list discussion and explanation from Hugh Dickins: "An anon_vma lookup points to a location which may contain the folio of interest, but might instead contain another folio: and weeding out those other folios is precisely what the "folio != pmd_folio((*pmd)" check (and the "risk of replacing the wrong folio" comment a few lines above it) is for." BUG: unable to handle page fault for address: ffffea60001db008 CPU: 0 UID: 0 PID: 2199114 Comm: tee Not tainted 6.14.0+ #4 NONE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:split_huge_pmd_locked+0x3b5/0x2b60 Call Trace: <TASK> try_to_migrate_one+0x28c/0x3730 rmap_walk_anon+0x4f6/0x770 unmap_folio+0x196/0x1f0 split_huge_page_to_list_to_order+0x9f6/0x1560 deferred_split_scan+0xac5/0x12a0 shrinker_debugfs_scan_write+0x376/0x470 full_proxy_write+0x15c/0x220 vfs_write+0x2fc/0xcb0 ksys_write+0x146/0x250 do_syscall_64+0x6a/0x120 entry_SYSCALL_64_after_hwframe+0x76/0x7e The bug is found by syzkaller on an internal kernel, then confirmed on upstream. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37958"> read more </a> </article> <hr> <article> <h3> CVE-2025-37959 - Linux Kernel BPF Scrub Packet on bpf_redirect_peer Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-37959 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redirect packets to a device in another network namespace, the skb isn't scrubbed. That can lead skb information from one namespace to be "misused" in another namespace. As one example, this is causing Cilium to drop traffic when using bpf_redirect_peer to redirect packets that just went through IPsec decryption to a container namespace. The following pwru trace shows (1) the packet path from the host's XFRM layer to the container's XFRM layer where it's dropped and (2) the number of active skb extensions at each function. NETNS MARK IFACE TUPLE FUNC 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 xfrm_rcv_cb .active_extensions = (__u8)2, 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 xfrm4_rcv_cb .active_extensions = (__u8)2, 4026533547 d00 eth0 10.244.3.124:35473->10.244.2.158:53 gro_cells_receive .active_extensions = (__u8)2, [...] 4026533547 0 eth0 10.244.3.124:35473->10.244.2.158:53 skb_do_redirect .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 ip_rcv .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 ip_rcv_core .active_extensions = (__u8)2, [...] 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 udp_queue_rcv_one_skb .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 __xfrm_policy_check .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 __xfrm_decode_session .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 security_xfrm_decode_session .active_extensions = (__u8)2, 4026534999 0 eth0 10.244.3.124:35473->10.244.2.158:53 kfree_skb_reason(SKB_DROP_REASON_XFRM_POLICY) .active_extensions = (__u8)2, In this case, there are no XFRM policies in the container's network namespace so the drop is unexpected. When we decrypt the IPsec packet, the XFRM state used for decryption is set in the skb extensions. This information is preserved across the netns switch. When we reach the XFRM policy check in the container's netns, __xfrm_policy_check drops the packet with LINUX_MIB_XFRMINNOPOLS because a (container-side) XFRM policy can't be found that matches the (host-side) XFRM state used for decryption. This patch fixes this by scrubbing the packet when using bpf_redirect_peer, as is done on typical netns switches via veth devices except skb->mark and skb->tstamp are not zeroed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37959"> read more </a> </article> <hr> <article> <h3> CVE-2025-37960 - Linux Kernel Memblock Accept Memory Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37960 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblock_double_array() When increasing the array size in memblock_double_array() and the slab is not yet available, a call to memblock_find_in_range() is used to reserve/allocate memory. However, the range returned may not have been accepted, which can result in a crash when booting an SNP guest: RIP: 0010:memcpy_orig+0x68/0x130 Code: ... RSP: 0000:ffffffff9cc03ce8 EFLAGS: 00010006 RAX: ff11001ff83e5000 RBX: 0000000000000000 RCX: fffffffffffff000 RDX: 0000000000000bc0 RSI: ffffffff9dba8860 RDI: ff11001ff83e5c00 RBP: 0000000000002000 R08: 0000000000000000 R09: 0000000000002000 R10: 000000207fffe000 R11: 0000040000000000 R12: ffffffff9d06ef78 R13: ff11001ff83e5000 R14: ffffffff9dba7c60 R15: 0000000000000c00 memblock_double_array+0xff/0x310 memblock_add_range+0x1fb/0x2f0 memblock_reserve+0x4f/0xa0 memblock_alloc_range_nid+0xac/0x130 memblock_alloc_internal+0x53/0xc0 memblock_alloc_try_nid+0x3d/0xa0 swiotlb_init_remap+0x149/0x2f0 mem_init+0xb/0xb0 mm_core_init+0x8f/0x350 start_kernel+0x17e/0x5d0 x86_64_start_reservations+0x14/0x30 x86_64_start_kernel+0x92/0xa0 secondary_startup_64_no_verify+0x194/0x19b Mitigate this by calling accept_memory() on the memory range returned before the slab is available. Prior to v6.12, the accept_memory() interface used a 'start' and 'end' parameter instead of 'start' and 'size', therefore the accept_memory() call must be adjusted to specify 'start + size' for 'end' when applying to kernels prior to v6.12. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37960"> read more </a> </article> <hr> <article> <h3> CVE-2025-37961 - Linux Kernel IPVS Uninit-value Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37961 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route4 syzbot reports for uninit-value for the saddr argument [1]. commit 4754957f04f5 ("ipvs: do not use random local source address for tunnels") already implies that the input value of saddr should be ignored but the code is still reading it which can prevent to connect the route. Fix it by changing the argument to ret_saddr. [1] BUG: KMSAN: uninit-value in do_output_route4+0x42c/0x4d0 net/netfilter/ipvs/ip_vs_xmit.c:147 do_output_route4+0x42c/0x4d0 net/netfilter/ipvs/ip_vs_xmit.c:147 __ip_vs_get_out_rt+0x403/0x21d0 net/netfilter/ipvs/ip_vs_xmit.c:330 ip_vs_tunnel_xmit+0x205/0x2380 net/netfilter/ipvs/ip_vs_xmit.c:1136 ip_vs_in_hook+0x1aa5/0x35b0 net/netfilter/ipvs/ip_vs_core.c:2063 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf7/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] __ip_local_out+0x758/0x7e0 net/ipv4/ip_output.c:118 ip_local_out net/ipv4/ip_output.c:127 [inline] ip_send_skb+0x6a/0x3c0 net/ipv4/ip_output.c:1501 udp_send_skb+0xfda/0x1b70 net/ipv4/udp.c:1195 udp_sendmsg+0x2fe3/0x33c0 net/ipv4/udp.c:1483 inet_sendmsg+0x1fc/0x280 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x267/0x380 net/socket.c:727 ____sys_sendmsg+0x91b/0xda0 net/socket.c:2566 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2620 __sys_sendmmsg+0x41d/0x880 net/socket.c:2702 __compat_sys_sendmmsg net/compat.c:360 [inline] __do_compat_sys_sendmmsg net/compat.c:367 [inline] __se_compat_sys_sendmmsg net/compat.c:364 [inline] __ia32_compat_sys_sendmmsg+0xc8/0x140 net/compat.c:364 ia32_sys_call+0x3ffa/0x41f0 arch/x86/include/generated/asm/syscalls_32.h:346 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x110 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e Uninit was created at: slab_post_alloc_hook mm/slub.c:4167 [inline] slab_alloc_node mm/slub.c:4210 [inline] __kmalloc_cache_noprof+0x8fa/0xe00 mm/slub.c:4367 kmalloc_noprof include/linux/slab.h:905 [inline] ip_vs_dest_dst_alloc net/netfilter/ipvs/ip_vs_xmit.c:61 [inline] __ip_vs_get_out_rt+0x35d/0x21d0 net/netfilter/ipvs/ip_vs_xmit.c:323 ip_vs_tunnel_xmit+0x205/0x2380 net/netfilter/ipvs/ip_vs_xmit.c:1136 ip_vs_in_hook+0x1aa5/0x35b0 net/netfilter/ipvs/ip_vs_core.c:2063 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf7/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] __ip_local_out+0x758/0x7e0 net/ipv4/ip_output.c:118 ip_local_out net/ipv4/ip_output.c:127 [inline] ip_send_skb+0x6a/0x3c0 net/ipv4/ip_output.c:1501 udp_send_skb+0xfda/0x1b70 net/ipv4/udp.c:1195 udp_sendmsg+0x2fe3/0x33c0 net/ipv4/udp.c:1483 inet_sendmsg+0x1fc/0x280 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x267/0x380 net/socket.c:727 ____sys_sendmsg+0x91b/0xda0 net/socket.c:2566 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2620 __sys_sendmmsg+0x41d/0x880 net/socket.c:2702 __compat_sys_sendmmsg net/compat.c:360 [inline] __do_compat_sys_sendmmsg net/compat.c:367 [inline] __se_compat_sys_sendmmsg net/compat.c:364 [inline] __ia32_compat_sys_sendmmsg+0xc8/0x140 net/compat.c:364 ia32_sys_call+0x3ffa/0x41f0 arch/x86/include/generated/asm/syscalls_32.h:346 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0xb0/0x110 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x38/0x80 arch/x86/entry/syscall_32.c:331 do_SYSENTER_32+0x1f/0x30 arch/x86/entry/syscall_32.c:369 entry_SYSENTER_compat_after_hwframe+0x84/0x8e CPU: 0 UID: 0 PID: 22408 Comm: syz.4.5165 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(undef) Hardware name: Google Google Compute Engi ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37961"> read more </a> </article> <hr> <article> <h3> CVE-2025-37962 - Linux Kernel ksmbd Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37962 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check for create lease context introduced a memory leak. When the bounds check fails, the function returns NULL without freeing the previously allocated lease_ctx_info structure. This patch fixes the issue by adding kfree(lreq) before returning NULL in both boundary check cases. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37962"> read more </a> </article> <hr> <article> <h3> CVE-2025-37963 - "Linux Kernel ARM64 BPF Unprivileged User Mitigation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37963 <br> <strong>Published : </strong> May 20, 2025, 4:15 p.m. | 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB. In addition, only mitigate cBPF programs that were loaded by an unprivileged user. Privileged users can also load the same program via eBPF, making the mitigation pointless. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37963"> read more </a> </article> <hr> <article> <h3> CVE-2025-26086 - RSI Queue Management System Blind SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-26086 <br> <strong>Published : </strong> May 20, 2025, 3:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attackers can remotely inject time-delayed SQL payloads to induce server response delays, enabling time-based inference and iterative extraction of sensitive database contents without authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26086"> read more </a> </article> <hr> <article> <h3> CVE-2025-41225 - VMware vCenter Server Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41225 <br> <strong>Published : </strong> May 20, 2025, 3:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41225"> read more </a> </article> <hr> <article> <h3> CVE-2025-41226 - VMware ESXi Guest Operation Denial-of-Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-41226 <br> <strong>Published : </strong> May 20, 2025, 3:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated through vCenter Server or ESXi may trigger this issue to create a denial-of-service condition of guest VMs with VMware Tools running and guest operations enabled. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41226"> read more </a> </article> <hr> <article> <h3> CVE-2025-41227 - VMware ESXi, Workstation, and Fusion Denial-of-Service Memory Exhaustion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41227 <br> <strong>Published : </strong> May 20, 2025, 3:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41227"> read more </a> </article> <hr> <article> <h3> CVE-2025-41228 - VMware ESXi and vCenter Server Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-41228 <br> <strong>Published : </strong> May 20, 2025, 3:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41228"> read more </a> </article> <hr> <article> <h3> CVE-2023-33861 - IBM Security ReaQta EDR Man-in-the-Middle (MITM) Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-33861 <br> <strong>Published : </strong> May 20, 2025, 3:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-33861"> read more </a> </article> <hr> <article> <h3> CVE-2024-53359 - Zalo Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53359 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53359"> read more </a> </article> <hr> <article> <h3> CVE-2025-45862 - TOTOLINK A3002R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45862 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45862"> read more </a> </article> <hr> <article> <h3> CVE-2025-47936 - TYPO3 CSRF Vulnerability in Webhooks </h3> <p> <strong>CVE ID : </strong>CVE-2025-47936 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, Webhooks are inherently vulnerable to Cross-Site Request Forgery (CSRF), which can be exploited by adversaries to target internal resources (e.g., localhost or other services on the local network). While this is not a vulnerability in TYPO3 itself, it may enable attackers to blindly access systems that would otherwise be inaccessible. An administrator-level backend user account is required to exploit this vulnerability. Users should update to TYPO3 version 12.4.31 LTS or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47936"> read more </a> </article> <hr> <article> <h3> CVE-2025-47937 - TYPO3 Table Query Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47937 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, when performing a database query involving multiple tables through the database abstraction layer (DBAL), frontend user permissions are only applied via `FrontendGroupRestriction` to the first table. As a result, data from additional tables included in the same query may be unintentionally exposed to unauthorized users. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47937"> read more </a> </article> <hr> <article> <h3> CVE-2025-47938 - TYPO3 Password Change Without Verification </h3> <p> <strong>CVE ID : </strong>CVE-2025-47938 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, the backend user management interface allows password changes without requiring the current password. When an administrator updates their own account or modifies other user accounts via the admin interface, the current password is not requested for verification. This behavior may lower the protection against unauthorized access in scenarios where an admin session is hijacked or left unattended, as it enables password changes without additional authentication. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47938"> read more </a> </article> <hr> <article> <h3> CVE-2025-47939 - TYPO3 File Upload Vulnerability (Unrestricted File Type Upload) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47939 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restriction means it is possible to upload files that may be considered potentially harmful, such as executable binaries (e.g., `.exe` files), or files with inconsistent file extensions and MIME types (for example, a file incorrectly named with a `.png` extension but actually carrying the MIME type `application/zip`) starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS. Although such files are not directly executable through the web server, their presence can introduce indirect risks. For example, third-party services such as antivirus scanners or malware detection systems might flag or block access to the website for end users if suspicious files are found. This could negatively affect the availability or reputation of the site. Users should update to TYPO3 version 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47939"> read more </a> </article> <hr> <article> <h3> CVE-2025-47940 - TYPO3 Privileged Access Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47940 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account. Users should update to TYPO3 version 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47940"> read more </a> </article> <hr> <article> <h3> CVE-2025-47941 - TYPO3 Backend MFA Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47941 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication. Users should update to TYPO3 version 12.4.31 LTS or 13.4.12 LTS to fix the problem. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47941"> read more </a> </article> <hr> <article> <h3> CVE-2025-4980 - Netgear DGND3700 HTTP Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4980 <br> <strong>Published : </strong> May 20, 2025, 2:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component mini_http. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4980"> read more </a> </article> <hr> <article> <h3> CVE-2025-40635 - Comerzzia Backoffice: Sales Orchestrator SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40635 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40635"> read more </a> </article> <hr> <article> <h3> CVE-2025-41229 - VMware Cloud Foundation Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41229 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41229"> read more </a> </article> <hr> <article> <h3> CVE-2025-41230 - VMware Cloud Foundation SSL/TLS Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-41230 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41230"> read more </a> </article> <hr> <article> <h3> CVE-2025-41231 - VMware Cloud Foundation Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41231 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41231"> read more </a> </article> <hr> <article> <h3> CVE-2025-4977 - Netgear DGND3700 Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4977 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4977"> read more </a> </article> <hr> <article> <h3> CVE-2025-4978 - Netgear DGND3700 Basic Authentication Remote Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4978 <br> <strong>Published : </strong> May 20, 2025, 1:15 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4978"> read more </a> </article> <hr> <article> <h3> CVE-2025-30193 - DNSdist TCP Stack Exhaustion Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30193 <br> <strong>Published : </strong> May 20, 2025, 12:15 p.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.10 version. A workaround is to restrict the maximum number of queries on incoming TCP connections to a safe value, like 50, via the setMaxTCPQueriesPerConnection setting. We would like to thank Renaud Allard for bringing this issue to our attention. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30193"> read more </a> </article> <hr> <article> <h3> CVE-2025-37892 - Linux Kernel MTD INFTL Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-37892 <br> <strong>Published : </strong> May 20, 2025, 11:15 a.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFTL_deleteblock(). The status will be set as SECTOR_IGNORE to break from the while-loop correctly if the inftl_read_oob() fails. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37892"> read more </a> </article> <hr> <article> <h3> CVE-2025-40633 - Koibox Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40633 <br> <strong>Published : </strong> May 20, 2025, 11:15 a.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>A Stored Cross-Site Scripting (XSS) vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker to upload an image containing malicious JavaScript code as profile picture in the '/es/dashboard/clientes/ficha/' endpoint <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40633"> read more </a> </article> <hr> <article> <h3> CVE-2025-40634 - TP-Link Archer AX50 Router Stack-based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40634 <br> <strong>Published : </strong> May 20, 2025, 11:15 a.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40634"> read more </a> </article> <hr> <article> <h3> CVE-2025-4951 - Rapid7 AppSpider Pro Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4951 <br> <strong>Published : </strong> May 20, 2025, 9:15 a.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration file directly. This is fixed as of version 7.5.018 <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4951"> read more </a> </article> <hr> <article> <h3> CVE-2024-5878 - WordPress SimpleLightbox Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-5878 <br> <strong>Published : </strong> May 20, 2025, 8:15 a.m. | 6 hours, 34 minutes ago <br> <strong>Description : </strong>Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-5878"> read more </a> </article> <hr> <article> <h3> CVE-2025-2929 - "WordPress Order Delivery Date Reflected Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2929 <br> <strong>Published : </strong> May 20, 2025, 6:15 a.m. | 8 hours, 34 minutes ago <br> <strong>Description : </strong>The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2929"> read more </a> </article> <hr> <article> <h3> CVE-2025-4322 - WordPress Motors Theme Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4322 <br> <strong>Published : </strong> May 20, 2025, 6:15 a.m. | 8 hours, 34 minutes ago <br> <strong>Description : </strong>The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4322"> read more </a> </article> <hr> <article> <h3> CVE-2025-3079 - HP Officejet and LaserJet Printer Passback Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3079 <br> <strong>Published : </strong> May 20, 2025, 12:15 a.m. | 14 hours, 34 minutes ago <br> <strong>Description : </strong>A passback vulnerability which relates to office/small office multifunction printers and laser printers. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3079"> read more </a> </article> <hr> <article> <h3> CVE-2025-4971 - Broadcom Automic Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4971 <br> <strong>Published : </strong> May 20, 2025, 12:15 a.m. | 14 hours, 34 minutes ago <br> <strong>Description : </strong>Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4971"> read more </a> </article> <hr> <article> <h3> CVE-2025-3078 - "Xerox Printer Passback Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3078 <br> <strong>Published : </strong> May 20, 2025, 12:15 a.m. | 14 hours, 3 minutes ago <br> <strong>Description : </strong>A passback vulnerability which relates to production printers and office multifunction printers. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 20 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3078"> read more </a> </article> <hr> <article> <h3> CVE-2025-1308 - Apache PX Backup Sensitive Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-1308 <br> <strong>Published : </strong> May 19, 2025, 10:15 p.m. | 16 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1308"> read more </a> </article> <hr> <article> <h3> CVE-2025-3223 - GE Vernova WorkstationST Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3223 <br> <strong>Published : </strong> May 19, 2025, 9:15 p.m. | 17 hours, 3 minutes ago <br> <strong>Description : </strong>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3223"> read more </a> </article> <hr> <article> <h3> CVE-2025-48340 - Danny Vink User Profile Meta Manager CSRF Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-48340 <br> <strong>Published : </strong> May 19, 2025, 9:15 p.m. | 17 hours, 3 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager allows Privilege Escalation.This issue affects User Profile Meta Manager: from n/a through 1.02. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48340"> read more </a> </article> <hr> <article> <h3> CVE-2025-46441 - CTLTWP Section Widget Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46441 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 18 hours, 3 minutes ago <br> <strong>Description : </strong>Path Traversal: '.../...//' vulnerability in ctltwp Section Widget allows Path Traversal.This issue affects Section Widget: from n/a through 3.3.1. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46441"> read more </a> </article> <hr> <article> <h3> CVE-2025-47935 - Multer Resource Exhaustion and Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47935 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 18 hours, 3 minutes ago <br> <strong>Description : </strong>Multer is a node.js middleware for handling `multipart/form-data`. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request stream emits an error, the internal `busboy` stream is not closed, violating Node.js stream safety guidance. This leads to unclosed streams accumulating over time, consuming memory and file descriptors. Under sustained or repeated failure conditions, this can result in denial of service, requiring manual server restarts to recover. All users of Multer handling file uploads are potentially impacted. Users should upgrade to 2.0.0 to receive a patch. No known workarounds are available. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47935"> read more </a> </article> <hr> <article> <h3> CVE-2025-47944 - Multer Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-47944 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 18 hours, 3 minutes ago <br> <strong>Description : </strong>Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.0 to receive a patch. No known workarounds are available. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47944"> read more </a> </article> <hr> <article> <h3> CVE-2025-47946 - Symfony UX Twig Component Attribute Injection XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-47946 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 18 hours, 3 minutes ago <br> <strong>Description : </strong>Symfony UX is an initiative and set of libraries to integrate JavaScript tools into applications. Prior to version 2.25.1, rendering `{{ attributes }}` or using any method that returns a `ComponentAttributes` instance (e.g. `only()`, `defaults()`, `without()`) ouputs attribute values directly without escaping. If these values are unsafe (e.g. contain user input), this can lead to HTML attribute injection and XSS vulnerabilities. The issue is fixed in version `2.25.1` of `symfony/ux-twig-component` Those who use `symfony/ux-live-component` must also update it to `2.25.1` to benefit from the fix, as it reuses the `ComponentAttributes` class internally. As a workaround, avoid rendering `{{ attributes }}` or derived objects directly if it may contain untrusted values. Instead, use `{{ attributes.render('name') }}` for safe output of individual attributes. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47946"> read more </a> </article> <hr> <article> <h3> CVE-2025-47949 - Samlify SAML Response Signature Wrapping Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47949 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 18 hours, 3 minutes ago <br> <strong>Description : </strong>samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47949"> read more </a> </article> <hr> <article> <h3> CVE-2025-39389 - Solid Plugins AnalyticsWP SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39389 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue affects AnalyticsWP: from n/a through 2.1.2. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39389"> read more </a> </article> <hr> <article> <h3> CVE-2025-39392 - Mojoomla WPAMS Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39392 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPAMS allows Reflected XSS.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39392"> read more </a> </article> <hr> <article> <h3> CVE-2025-39393 - Mojoomla Hospital Management System Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39393 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 (20-11-2023). <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39393"> read more </a> </article> <hr> <article> <h3> CVE-2025-39395 - Mojoomla WPAMS SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39395 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39395"> read more </a> </article> <hr> <article> <h3> CVE-2025-39401 - Mojoomla WPAMS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39401 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39401"> read more </a> </article> <hr> <article> <h3> CVE-2025-39402 - Mojoomla WPAMS Unrestricted File Upload Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-39402 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 33 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39402"> read more </a> </article> <hr> <article> <h3> CVE-2025-39386 - Mojoomla Hospital Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39386 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 16 hours, 3 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.0(20-11-2023). <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39386"> read more </a> </article> <hr> <article> <h3> CVE-2025-39366 - Rocket Apps wProject Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39366 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 14 hours, 33 minutes ago <br> <strong>Description : </strong>Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39366"> read more </a> </article> <hr> <article> <h3> CVE-2025-39372 - WordPress Events Calendar Registration Tickets Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39372 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 14 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elbisnero WordPress Events Calendar Registration & Tickets allows Reflected XSS.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through 2.6.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39372"> read more </a> </article> <hr> <article> <h3> CVE-2025-39380 - Mojoomla Hospital Management System File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39380 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 14 hours, 33 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through 47.0(20-11-2023). <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39380"> read more </a> </article> <hr> <article> <h3> CVE-2025-39365 - Rocket Apps wProject Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39365 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 12 hours, 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39365"> read more </a> </article> <hr> <article> <h3> CVE-2025-39357 - Mojoomla Hospital Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39357 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 12 hours, 3 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.0(20-11-2023). <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39357"> read more </a> </article> <hr> <article> <h3> CVE-2025-39355 - FAT Services Booking SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39355 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 10 hours, 3 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through 5.6. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39355"> read more </a> </article> <hr> <article> <h3> CVE-2025-39356 - Chimpstudio Foodbakery Sticky Cart Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39356 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 10 hours, 3 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Chimpstudio Foodbakery Sticky Cart allows Object Injection.This issue affects Foodbakery Sticky Cart: from n/a through 3.2. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39356"> read more </a> </article> <hr> <article> <h3> CVE-2025-39350 - Rocket Apps wProject Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39350 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39350"> read more </a> </article> <hr> <article> <h3> CVE-2025-39352 - ThemeGoods Grand Restaurant WordPress Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39352 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in ThemeGoods Grand Restaurant WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant WordPress: from n/a through 7.0. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39352"> read more </a> </article> <hr> <article> <h3> CVE-2025-39354 - ThemeGoods Grand Conference Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39354 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference allows Object Injection.This issue affects Grand Conference: from n/a through 5.2. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39354"> read more </a> </article> <hr> <article> <h3> CVE-2025-39349 - CiyaShop Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39349 <br> <strong>Published : </strong> May 19, 2025, 8:15 p.m. | 2 hours, 3 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Potenzaglobalsolutions CiyaShop allows Object Injection.This issue affects CiyaShop: from n/a through 4.18.0. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39349"> read more </a> </article> <hr> <article> <h3> CVE-2025-39403 - Mojoomla WPAMS SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39403 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39403"> read more </a> </article> <hr> <article> <h3> CVE-2025-39405 - Mojoomla WPAMS Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39405 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Incorrect Privilege Assignment vulnerability in mojoomla WPAMS allows Privilege Escalation.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39405"> read more </a> </article> <hr> <article> <h3> CVE-2025-39406 - Mojoomla WPAMS PHP Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39406 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPAMS allows PHP Local File Inclusion.This issue affects WPAMS: from n/a through 44.0. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39406"> read more </a> </article> <hr> <article> <h3> CVE-2025-39407 - Caseproof, LLC Memberpress Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39407 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caseproof, LLC Memberpress allows Reflected XSS.This issue affects Memberpress: from n/a through 1.11.37. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39407"> read more </a> </article> <hr> <article> <h3> CVE-2025-39409 - Pressaholic WordPress Video Robot Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39409 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39409"> read more </a> </article> <hr> <article> <h3> CVE-2025-39410 - Themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon Deserialization of Untrusted Data Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39410 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in themegusta Smart Sections Theme Builder - WPBakery Page Builder Addon.This issue affects Smart Sections Theme Builder - WPBakery Page Builder Addon: from n/a through 1.7.8. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39410"> read more </a> </article> <hr> <article> <h3> CVE-2025-39411 - Indie_Plugins WhatsApp Click to Chat Plugin for WordPress PHP Remote File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-39411 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Indie_Plugins WhatsApp Click to Chat Plugin for WordPress.This issue affects WhatsApp Click to Chat Plugin for WordPress: from n/a through 2.2.12. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39411"> read more </a> </article> <hr> <article> <h3> CVE-2025-39445 - Highwarden Super Store Finder SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-39445 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder allows SQL Injection.This issue affects Super Store Finder: from n/a through 7.2. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39445"> read more </a> </article> <hr> <article> <h3> CVE-2025-39446 - Booster Plus for WooCommerce Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39446 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39446"> read more </a> </article> <hr> <article> <h3> CVE-2025-39447 - Crocoblock JetElements For Elementor Missing Authorization </h3> <p> <strong>CVE ID : </strong>CVE-2025-39447 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Crocoblock JetElements For Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetElements For Elementor: from n/a through 2.7.4.1. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39447"> read more </a> </article> <hr> <article> <h3> CVE-2025-39449 - Crocoblock JetWooBuilder Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39449 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Crocoblock JetWooBuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through 2.1.18. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39449"> read more </a> </article> <hr> <article> <h3> CVE-2025-39451 - Crocoblock JetBlocks For Elementor Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39451 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through 1.3.16. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39451"> read more </a> </article> <hr> <article> <h3> CVE-2025-39458 - Mikado-Themes Foton PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39458 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton allows PHP Local File Inclusion.This issue affects Foton: from n/a through 2.5.2. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39458"> read more </a> </article> <hr> <article> <h3> CVE-2025-39459 - Contempo Themes Real Estate Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-39459 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Incorrect Privilege Assignment vulnerability in Contempo Themes Real Estate 7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through 3.5.2. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39459"> read more </a> </article> <hr> <article> <h3> CVE-2025-43832 - Andreyk Remote Images Grabber Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-43832 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andreyk Remote Images Grabber allows Reflected XSS.This issue affects Remote Images Grabber: from n/a through 0.6. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43832"> read more </a> </article> <hr> <article> <h3> CVE-2025-43836 - Syndicate Out Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-43836 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in confuzzledduck Syndicate Out allows Reflected XSS.This issue affects Syndicate Out: from n/a through 0.9. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43836"> read more </a> </article> <hr> <article> <h3> CVE-2025-43837 - "binti76 Total Donations Cross-site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-43837 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in binti76 Total Donations allows Reflected XSS.This issue affects Total Donations: from n/a through 3.0.8. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43837"> read more </a> </article> <hr> <article> <h3> CVE-2025-43838 - ChoPlugins Custom PC Builder Lite for WooCommerce Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43838 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in ChoPlugins Custom PC Builder Lite for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom PC Builder Lite for WooCommerce: from n/a through 1.0.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43838"> read more </a> </article> <hr> <article> <h3> CVE-2025-43839 - Shanebp BP Messages Tool Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43839 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shanebp BP Messages Tool allows Reflected XSS.This issue affects BP Messages Tool: from n/a through 2.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43839"> read more </a> </article> <hr> <article> <h3> CVE-2025-47283 - Gardener gardenlet Administrative Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47283 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47283"> read more </a> </article> <hr> <article> <h3> CVE-2025-47284 - Gardener Gardenlet Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47284 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47284"> read more </a> </article> <hr> <article> <h3> CVE-2025-47577 - TemplateInvaders TI WooCommerce Wishlist Unrestricted File Upload Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47577 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in TemplateInvaders TI WooCommerce Wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through 2.9.2. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47577"> read more </a> </article> <hr> <article> <h3> CVE-2025-47581 - Elbisnero WordPress Events Calendar Registration Tickets Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47581 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Elbisnero WordPress Events Calendar Registration & Tickets allows Object Injection.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through 2.6.0. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47581"> read more </a> </article> <hr> <article> <h3> CVE-2025-47934 - OpenPGP.js Signature Verification Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-47934 <br> <strong>Published : </strong> May 19, 2025, 7:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. Startinf in version 5.0.1 and prior to versions 5.11.3 and 6.1.1, a maliciously modified message can be passed to either `openpgp.verify` or `openpgp.decrypt`, causing these functions to return a valid signature verification result while returning data that was not actually signed. This flaw allows signature verifications of inline (non-detached) signed messages (using `openpgp.verify`) and signed-and-encrypted messages (using `openpgp.decrypt` with `verificationKeys`) to be spoofed, since both functions return extracted data that may not match the data that was originally signed. Detached signature verifications are not affected, as no signed data is returned in that case. In order to spoof a message, the attacker needs a single valid message signature (inline or detached) as well as the plaintext data that was legitimately signed, and can then construct an inline-signed message or signed-and-encrypted message with any data of the attacker's choice, which will appear as legitimately signed by affected versions of OpenPGP.js. In other words, any inline-signed message can be modified to return any other data (while still indicating that the signature was valid), and the same is true for signed+encrypted messages if the attacker can obtain a valid signature and encrypt a new message (of the attacker's choice) together with that signature. The issue has been patched in versions 5.11.3 and 6.1.1. Some workarounds are available. When verifying inline-signed messages, extract the message and signature(s) from the message returned by `openpgp.readMessage`, and verify the(/each) signature as a detached signature by passing the signature and a new message containing only the data (created using `openpgp.createMessage`) to `openpgp.verify`. When decrypting and verifying signed+encrypted messages, decrypt and verify the message in two steps, by first calling `openpgp.decrypt` without `verificationKeys`, and then passing the returned signature(s) and a new message containing the decrypted data (created using `openpgp.createMessage`) to `openpgp.verify`. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47934"> read more </a> </article> <hr> <article> <h3> CVE-2025-47582 - QuantumCloud WPBot Pro Wordpress Chatbot Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47582 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object Injection.This issue affects WPBot Pro Wordpress Chatbot: from n/a through 12.7.0. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47582"> read more </a> </article> <hr> <article> <h3> CVE-2025-22287 - Eniture Technology LTL Freight Quotes - FreightQuote Edition Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22287 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Eniture Technology LTL Freight Quotes – FreightQuote Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through 2.3.11. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22287"> read more </a> </article> <hr> <article> <h3> CVE-2025-26735 - Candid Grip PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26735 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Candid themes Grip.This issue affects Grip: from n/a through 1.0.9. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26735"> read more </a> </article> <hr> <article> <h3> CVE-2025-26872 - Eximius Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26872 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Eximius allows Using Malicious Files.This issue affects Eximius: from n/a through 2.2. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26872"> read more </a> </article> <hr> <article> <h3> CVE-2025-26892 - dkszone Celestial Aura Unrestricted File Upload RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-26892 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through 2.2. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26892"> read more </a> </article> <hr> <article> <h3> CVE-2025-26997 - Validas Wireless Butler Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-26997 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in validas Wireless Butler allows Reflected XSS.This issue affects Wireless Butler: from n/a through 1.0.11. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26997"> read more </a> </article> <hr> <article> <h3> CVE-2025-27010 - Tastyc PHP Path Traversal Local File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-27010 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Path Traversal: '.../...//' vulnerability in bslthemes Tastyc allows PHP Local File Inclusion.This issue affects Tastyc: from n/a before 2.5.2. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27010"> read more </a> </article> <hr> <article> <h3> CVE-2025-39396 - Crocoblock JetReviews PHP Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39396 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetReviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through 2.3.6. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39396"> read more </a> </article> <hr> <article> <h3> CVE-2025-39398 - Bellevue Hotel + Bed and Breakfast Booking Calendar Theme Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39398 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Themovation Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue.This issue affects Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue: from n/a through 4.2.2. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39398"> read more </a> </article> <hr> <article> <h3> CVE-2025-39412 - Averta Master Slider Unauthenticated Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39412 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.10.8. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39412"> read more </a> </article> <hr> <article> <h3> CVE-2025-39448 - Crocoblock JetElements For Elementor Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39448 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.7.4.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39448"> read more </a> </article> <hr> <article> <h3> CVE-2025-39450 - Crocoblock JetTabs Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-39450 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through 2.2.7. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39450"> read more </a> </article> <hr> <article> <h3> CVE-2025-39454 - Jeroen Peters Name Directory Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39454 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Jeroen Peters Name Directory.This issue affects Name Directory: from n/a through 1.30.0. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39454"> read more </a> </article> <hr> <article> <h3> CVE-2025-39460 - ThimPress Eduma Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39460 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in ThimPress Eduma allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eduma: from n/a through 5.6.4. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39460"> read more </a> </article> <hr> <article> <h3> CVE-2025-43833 - Amir Helzer Absolute Links SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43833 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through 1.1.1. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43833"> read more </a> </article> <hr> <article> <h3> CVE-2025-43834 - Tox82 CookieBAR Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43834 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tox82 cookieBAR allows Stored XSS.This issue affects cookieBAR: from n/a through 1.7.0. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43834"> read more </a> </article> <hr> <article> <h3> CVE-2025-43835 - Ktsvetkov WP-Cyr CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-43835 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in ktsvetkov allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through 0.1. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43835"> read more </a> </article> <hr> <article> <h3> CVE-2025-43840 - Ref CheckBot CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-43840 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Ref CheckBot allows Stored XSS.This issue affects CheckBot: from n/a through 1.05. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43840"> read more </a> </article> <hr> <article> <h3> CVE-2025-43841 - WP Vegas Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-43841 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jamesdbruner WP Vegas allows Stored XSS.This issue affects WP Vegas: from n/a through 2.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43841"> read more </a> </article> <hr> <article> <h3> CVE-2025-47282 - Gardener External DNS Management Seed Cluster Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47282 <br> <strong>Published : </strong> May 19, 2025, 6:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user with administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot cluster, to obtain control over the seed cluster where the shoot cluster is managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. The affected component is `gardener/external-dns-management`. The `external-dns-management` component may also be deployed on the seeds by the `gardener/gardener-extension-shoot-dns-service` extension when the extension is enabled. In this case, all versions of the `shoot-dns-service` extension `<= v1.60.0` are affected by this vulnerability. Version 0.23.6 of Gardener External DNS Management fixes the issue. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47282"> read more </a> </article> <hr> <article> <h3> CVE-2025-47576 - Bringthepixel Bimber Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47576 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bringthepixel Bimber - Viral Magazine WordPress Theme.This issue affects Bimber - Viral Magazine WordPress Theme: from n/a through 9.2.5. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47576"> read more </a> </article> <hr> <article> <h3> CVE-2025-47583 - "Apache Cloud Salon CSRF" </h3> <p> <strong>CVE ID : </strong>CVE-2025-47583 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>Unauthenticated Cross Site Request Forgery (CSRF) in Salon booking system <= 10.16 versions. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47583"> read more </a> </article> <hr> <article> <h3> CVE-2025-4940 - "1000 Projects Daily College Class Work Report Book SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4940 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admin_info.php. The manipulation of the argument batch leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4940"> read more </a> </article> <hr> <article> <h3> CVE-2025-4941 - PHPGurukul Credit Card Application Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4941 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4941"> read more </a> </article> <hr> <article> <h3> CVE-2025-4945 - GNOME Libsoup Cookie Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4945 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 1 hour, 30 minutes ago <br> <strong>Description : </strong>A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4945"> read more </a> </article> <hr> <article> <h3> CVE-2025-26867 - Themes4WP Bulk Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26867 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26867"> read more </a> </article> <hr> <article> <h3> CVE-2025-26920 - Customify Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26920 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in PressMaximum Customify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customify: from n/a through 0.4.8. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26920"> read more </a> </article> <hr> <article> <h3> CVE-2025-39351 - ThemeGoods Grand Restaurant WordPress CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39351 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant WordPress allows Cross Site Request Forgery.This issue affects Grand Restaurant WordPress: from n/a through 7.0. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39351"> read more </a> </article> <hr> <article> <h3> CVE-2025-39353 - ThemeGoods Grand Restaurant WordPress Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39353 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in ThemeGoods Grand Restaurant WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant WordPress: from n/a through 7.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39353"> read more </a> </article> <hr> <article> <h3> CVE-2025-39364 - Product Category Slider for WooCommerce PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39364 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PluginEver Product Category Slider for WooCommerce allows PHP Local File Inclusion.This issue affects Product Category Slider for WooCommerce: from n/a through 4.3.4. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39364"> read more </a> </article> <hr> <article> <h3> CVE-2025-39368 - Rootspersona Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39368 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in ed4becky Rootspersona allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rootspersona: from n/a through 3.7.5. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39368"> read more </a> </article> <hr> <article> <h3> CVE-2025-39369 - Sihibbs Posts for Page DOM-Based XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39369 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sihibbs Posts for Page allows DOM-Based XSS.This issue affects Posts for Page: from n/a through 2.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39369"> read more </a> </article> <hr> <article> <h3> CVE-2025-39370 - ICafe Library SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39370 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cnilsson iCafe Library allows SQL Injection.This issue affects iCafe Library: from n/a through 1.8.3. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39370"> read more </a> </article> <hr> <article> <h3> CVE-2025-39371 - Sanjeev Mohindra Author Box Plugin CSRF Attack </h3> <p> <strong>CVE ID : </strong>CVE-2025-39371 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Sanjeev Mohindra Author Box Plugin With Different Description allows Cross Site Request Forgery.This issue affects Author Box Plugin With Different Description: from n/a through 1.3.5. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39371"> read more </a> </article> <hr> <article> <h3> CVE-2025-39373 - JNews JNews Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39373 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in jegtheme JNews.This issue affects JNews: from n/a through 11.6.5. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39373"> read more </a> </article> <hr> <article> <h3> CVE-2025-39374 - Aseem1234 Best Posts Summary CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-39374 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in aseem1234 Best Posts Summary allows Stored XSS.This issue affects Best Posts Summary: from n/a through 1.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39374"> read more </a> </article> <hr> <article> <h3> CVE-2025-39375 - Ashok G Easy Child Theme Creator CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39375 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Ashok G Easy Child Theme Creator allows Cross Site Request Forgery.This issue affects Easy Child Theme Creator: from n/a through 1.3.1. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39375"> read more </a> </article> <hr> <article> <h3> CVE-2025-39376 - QuanticaLabs Car Park Booking System for WordPress Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39376 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in QuanticaLabs Car Park Booking System for WordPress.This issue affects Car Park Booking System for WordPress: from n/a through 2.6. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39376"> read more </a> </article> <hr> <article> <h3> CVE-2025-39388 - Solid Plugins AnalyticsWP Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39388 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AnalyticsWP: from n/a through 2.0.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39388"> read more </a> </article> <hr> <article> <h3> CVE-2025-39394 - AnalyticsWP Sensitive System Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-39394 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP allows Retrieve Embedded Sensitive Data.This issue affects AnalyticsWP: from n/a through 2.1.2. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39394"> read more </a> </article> <hr> <article> <h3> CVE-2025-46262 - Mad Mimi for WordPress Stored Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46262 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Mad Mimi for WordPress allows Stored XSS.This issue affects Mad Mimi for WordPress: from n/a through 1.5.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46262"> read more </a> </article> <hr> <article> <h3> CVE-2025-46263 - Lloyd Saunders Author Box Stored Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46263 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lloyd Saunders Author Box After Posts allows Stored XSS.This issue affects Author Box After Posts: from n/a through 1.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46263"> read more </a> </article> <hr> <article> <h3> CVE-2025-46543 - Charly Leetham Enhanced Paypal Shortcodes Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46543 <br> <strong>Published : </strong> May 19, 2025, 5:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Charly Leetham Enhanced Paypal Shortcodes allows Stored XSS.This issue affects Enhanced Paypal Shortcodes: from n/a through 0.5a. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46543"> read more </a> </article> <hr> <article> <h3> CVE-2025-4939 - PHPGurukul Credit Card Application Management System Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4939 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0. This vulnerability affects unknown code of the file /admin/new-ccapplication.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4939"> read more </a> </article> <hr> <article> <h3> CVE-2025-4948 - Libsoup Integer Underflow Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4948 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal calculation can go wrong, leading to an integer underflow. This can cause the program to access invalid memory and crash. As a result, any application or server using libsoup could be forced to exit unexpectedly, creating a denial-of-service (DoS) risk. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4948"> read more </a> </article> <hr> <article> <h3> CVE-2024-33939 - Masteriyo Masteriyo LMS Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-33939 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-33939"> read more </a> </article> <hr> <article> <h3> CVE-2025-22678 - MyTheme's My White Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-22678 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mythemes my white allows Reflected XSS.This issue affects my white: from n/a through 2.0.8. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22678"> read more </a> </article> <hr> <article> <h3> CVE-2025-22687 - Asmedia Tuaug4 Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-22687 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asmedia Tuaug4 allows Reflected XSS.This issue affects Tuaug4: from n/a through 1.4. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22687"> read more </a> </article> <hr> <article> <h3> CVE-2025-22789 - Fyrewurks Polka Dots Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22789 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks polka dots allows Reflected XSS.This issue affects polka dots: from n/a through 1.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22789"> read more </a> </article> <hr> <article> <h3> CVE-2025-22790 - Asmedia Moseter Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22790 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asmedia allows Reflected XSS.This issue affects moseter: from n/a through 1.3.1. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22790"> read more </a> </article> <hr> <article> <h3> CVE-2025-22791 - "twh Cross-site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-22791 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22791"> read more </a> </article> <hr> <article> <h3> CVE-2025-22792 - Js O3 Lite Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22792 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22792"> read more </a> </article> <hr> <article> <h3> CVE-2025-23979 - Duwasai Flashy Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23979 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duwasai Flashy allows Reflected XSS.This issue affects Flashy: from n/a through 1.2.1. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23979"> read more </a> </article> <hr> <article> <h3> CVE-2025-23981 - Takimi CarZine Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-23981 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takimi Themes CarZine allows Reflected XSS.This issue affects CarZine: from n/a through 1.4.6. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23981"> read more </a> </article> <hr> <article> <h3> CVE-2025-23983 - Tijaji Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-23983 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tijaji allows Reflected XSS.This issue affects Tijaji: from n/a through 1.43. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23983"> read more </a> </article> <hr> <article> <h3> CVE-2025-23986 - Fyrewurks Tiki Time Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-23986 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23986"> read more </a> </article> <hr> <article> <h3> CVE-2025-23988 - Ghostwriter Reflected Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-23988 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno Cavalcante Ghostwriter allows Reflected XSS.This issue affects Ghostwriter: from n/a through 1.4. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23988"> read more </a> </article> <hr> <article> <h3> CVE-2025-24183 - Apple macOS File System Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24183 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local user may be able to modify protected parts of the file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24183"> read more </a> </article> <hr> <article> <h3> CVE-2025-24184 - Apple VisionOS Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24184 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to cause unexpected system termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24184"> read more </a> </article> <hr> <article> <h3> CVE-2025-24189 - Safari Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24189 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in Safari 18.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing maliciously crafted web content may lead to memory corruption. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24189"> read more </a> </article> <hr> <article> <h3> CVE-2025-26621 - OpenCTI Prototype Pollution Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-26621 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that will execute javascript code. This can be abused to cause a denial of service attack by prototype pollution, making the node js server running the OpenCTI frontend become unavailable. Version 6.5.2 fixes the issue. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26621"> read more </a> </article> <hr> <article> <h3> CVE-2025-31185 - Apple iOS Hidden Photos Album Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31185 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be viewed without authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31185"> read more </a> </article> <hr> <article> <h3> CVE-2025-31262 - Apple VisionOS File System Permissions Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31262 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to modify protected parts of the file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31262"> read more </a> </article> <hr> <article> <h3> CVE-2025-32920 - TemplateInvaders WooCommerce Wishlist Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32920 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a through 2.9.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32920"> read more </a> </article> <hr> <article> <h3> CVE-2025-4876 - ConnectWise Risk Assessment Hardcoded AES Key Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4876 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained the key can be used to decrypt CSV input files used for authenticated network scanning. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4876"> read more </a> </article> <hr> <article> <h3> CVE-2025-4938 - PHPGurukul Employee Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4938 <br> <strong>Published : </strong> May 19, 2025, 4:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registererms.php. The manipulation of the argument Email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4938"> read more </a> </article> <hr> <article> <h3> CVE-2025-4936 - "Projectworlds Online Food Ordering System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4936 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin-page.php. The manipulation of the argument 1_price leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4936"> read more </a> </article> <hr> <article> <h3> CVE-2025-4937 - SourceCodester Apartment Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4937 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4937"> read more </a> </article> <hr> <article> <h3> CVE-2025-48259 - Juan Carlos WP Mapa Politico España CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48259 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Juan Carlos WP Mapa Politico España allows Cross Site Request Forgery. This issue affects WP Mapa Politico España: from n/a through 3.8.0. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48259"> read more </a> </article> <hr> <article> <h3> CVE-2025-48260 - Ninja Team GDPR CCPA Compliance Support Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48260 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GDPR CCPA Compliance Support: from n/a through 2.7.3. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48260"> read more </a> </article> <hr> <article> <h3> CVE-2025-48262 - Url Rewrite Analyzer Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48262 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Michael Revellin-Clerc Url Rewrite Analyzer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Url Rewrite Analyzer: from n/a through 1.3.3. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48262"> read more </a> </article> <hr> <article> <h3> CVE-2025-48263 - MultiVendorX Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48263 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MultiVendorX MultiVendorX allows Stored XSS. This issue affects MultiVendorX: from n/a through 4.2.22. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48263"> read more </a> </article> <hr> <article> <h3> CVE-2025-48264 - Artiosmedia Product Code for WooCommerce CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48264 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in artiosmedia Product Code for WooCommerce allows Cross Site Request Forgery. This issue affects Product Code for WooCommerce: from n/a through 1.5.0. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48264"> read more </a> </article> <hr> <article> <h3> CVE-2025-48265 - Pektsekye Year Make Model Search for WooCommerce CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48265 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Pektsekye Year Make Model Search for WooCommerce allows Cross Site Request Forgery. This issue affects Year Make Model Search for WooCommerce: from n/a through 1.0.11. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48265"> read more </a> </article> <hr> <article> <h3> CVE-2025-48266 - RealMag777 Active Products Tables for WooCommerce Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48266 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce allows Stored XSS. This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.8. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48266"> read more </a> </article> <hr> <article> <h3> CVE-2025-48268 - Guru Team Bot for Telegram WooCommerce Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48268 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bot for Telegram on WooCommerce: from n/a through 1.2.6. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48268"> read more </a> </article> <hr> <article> <h3> CVE-2025-48269 - WPAdverts Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48269 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts allows DOM-Based XSS. This issue affects WPAdverts: from n/a through 2.2.3. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48269"> read more </a> </article> <hr> <article> <h3> CVE-2025-48270 - SKT Blocks DOM-Based Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-48270 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks allows DOM-Based XSS. This issue affects SKT Blocks: from n/a through 2.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48270"> read more </a> </article> <hr> <article> <h3> CVE-2025-48272 - WP Job Portal Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48272 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in wpjobportal WP Job Portal allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Job Portal: from n/a through 2.3.2. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48272"> read more </a> </article> <hr> <article> <h3> CVE-2025-48276 - Visual Composer Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48276 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.11.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48276"> read more </a> </article> <hr> <article> <h3> CVE-2025-48277 - Stylemix Cost Calculator Builder Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48277 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost Calculator Builder allows Stored XSS. This issue affects Cost Calculator Builder: from n/a through 3.2.74. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48277"> read more </a> </article> <hr> <article> <h3> CVE-2025-48278 - RSVPMarker SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48278 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker allows SQL Injection. This issue affects RSVPMarker : from n/a through 11.5.6. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48278"> read more </a> </article> <hr> <article> <h3> CVE-2025-48280 - AutomatorWP SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48280 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP allows Blind SQL Injection. This issue affects AutomatorWP: from n/a through 5.2.1.3. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48280"> read more </a> </article> <hr> <article> <h3> CVE-2025-48282 - Majestic Support Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48282 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Majestic Support Majestic Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Majestic Support: from n/a through 1.1.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48282"> read more </a> </article> <hr> <article> <h3> CVE-2025-48284 - WooCommerce Japanized For CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48284 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce allows Cross Site Request Forgery. This issue affects Japanized For WooCommerce: from n/a through 2.6.40. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48284"> read more </a> </article> <hr> <article> <h3> CVE-2025-48285 - Falang Multilanguage CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48285 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage allows Cross Site Request Forgery. This issue affects Falang multilanguage: from n/a through 1.3.61. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48285"> read more </a> </article> <hr> <article> <h3> CVE-2025-48288 - Element Invader Elementor Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48288 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor allows Stored XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.5. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48288"> read more </a> </article> <hr> <article> <h3> CVE-2025-48341 - 10Web Form Maker Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48341 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web allows Stored XSS. This issue affects Form Maker by 10Web: from n/a through 1.15.33. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48341"> read more </a> </article> <hr> <article> <h3> CVE-2025-48342 - RedefiningTheWeb Dynamic Pricing Discounts Lite for WooCommerce CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48342 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce allows Cross Site Request Forgery. This issue affects Dynamic Pricing & Discounts Lite for WooCommerce: from n/a through 2.0.3. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48342"> read more </a> </article> <hr> <article> <h3> CVE-2025-48344 - Rootspersona CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48344 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in ed4becky Rootspersona allows Cross Site Request Forgery. This issue affects Rootspersona: from n/a through 3.7.5. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48344"> read more </a> </article> <hr> <article> <h3> CVE-2025-48346 - Etsy360 Embed and Integrate Etsy Shop Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48346 <br> <strong>Published : </strong> May 19, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Etsy360 Embed and Integrate Etsy Shop allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embed and Integrate Etsy Shop: from n/a through 1.0.4. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48346"> read more </a> </article> <hr> <article> <h3> CVE-2024-4878 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-4878 <br> <strong>Published : </strong> May 19, 2025, 2:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>Rejected reason: Unused CVE record, incorrectly reserved <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-4878"> read more </a> </article> <hr> <article> <h3> CVE-2025-28371 - EnGenius ENH500 AP Access Control Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28371 <br> <strong>Published : </strong> May 19, 2025, 2:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28371"> read more </a> </article> <hr> <article> <h3> CVE-2025-44108 - Flatpress CMS Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44108 <br> <strong>Published : </strong> May 19, 2025, 2:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44108"> read more </a> </article> <hr> <article> <h3> CVE-2025-4934 - PHPGurukul User Registration Login and User Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4934 <br> <strong>Published : </strong> May 19, 2025, 2:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4934"> read more </a> </article> <hr> <article> <h3> CVE-2025-4935 - SourceCodester Stock Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4935 <br> <strong>Published : </strong> May 19, 2025, 2:15 p.m. | 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/changePassword.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4935"> read more </a> </article> <hr> <article> <h3> CVE-2025-4932 - Projectworlds Online Lawyer Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4932 <br> <strong>Published : </strong> May 19, 2025, 1:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown functionality of the file /lawyer_registation.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4932"> read more </a> </article> <hr> <article> <h3> CVE-2025-4933 - Ponaravindb Hospital-Management-System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4933 <br> <strong>Published : </strong> May 19, 2025, 1:15 p.m. | 1 hour, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4933"> read more </a> </article> <hr> <article> <h3> CVE-2025-2099 - Huggingface Transformers ReDoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2099 <br> <strong>Published : </strong> May 19, 2025, 12:15 p.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2099"> read more </a> </article> <hr> <article> <h3> CVE-2025-4930 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4930 <br> <strong>Published : </strong> May 19, 2025, 12:15 p.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /my-cart.php. The manipulation of the argument billingaddress leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4930"> read more </a> </article> <hr> <article> <h3> CVE-2025-4931 - Projectworlds Online Lawyer Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4931 <br> <strong>Published : </strong> May 19, 2025, 12:15 p.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /user_registation.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4931"> read more </a> </article> <hr> <article> <h3> CVE-2025-4928 - Projectworlds Online Lawyer Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4928 <br> <strong>Published : </strong> May 19, 2025, 11:15 a.m. | 3 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /save_lawyer_edit_profile.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4928"> read more </a> </article> <hr> <article> <h3> CVE-2025-4929 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4929 <br> <strong>Published : </strong> May 19, 2025, 11:15 a.m. | 3 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4929"> read more </a> </article> <hr> <article> <h3> CVE-2025-4926 - A vulnerability was found in PHPGurukul Car Rental </h3> <p> <strong>CVE ID : </strong>CVE-2025-4926 <br> <strong>Published : </strong> May 19, 2025, 10:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/post-avehical.php. The manipulation of the argument img1/img2/img3/img4/img5 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4926"> read more </a> </article> <hr> <article> <h3> CVE-2025-4927 - PHPGurukul Online Marriage Registration System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4927 <br> <strong>Published : </strong> May 19, 2025, 10:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4927"> read more </a> </article> <hr> <article> <h3> CVE-2025-27566 - a-blog CMS Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27566 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote authenticated attacker with the administrator privilege may obtain or delete any file on the server. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27566"> read more </a> </article> <hr> <article> <h3> CVE-2025-32999 - "A-Blog CMS Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-32999 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior to Ver. 3.0.47. This issue exists in a specific field in the entry editing screen, and exploitation requires contributor or higher level privileges. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32999"> read more </a> </article> <hr> <article> <h3> CVE-2025-36560 - A-Blog CMS SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36560 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36560"> read more </a> </article> <hr> <article> <h3> CVE-2025-41429 - A-Blog CMS Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41429 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41429"> read more </a> </article> <hr> <article> <h3> CVE-2025-4924 - SourceCodester Client Database Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4924 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /user_void_transaction.php. The manipulation of the argument order_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4924"> read more </a> </article> <hr> <article> <h3> CVE-2025-4925 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4925 <br> <strong>Published : </strong> May 19, 2025, 9:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4925"> read more </a> </article> <hr> <article> <h3> CVE-2025-47758 - Citrix Systems VSFT Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47758 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6File!CTxSubFile::get_ProgramFile_name function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47758"> read more </a> </article> <hr> <article> <h3> CVE-2025-47759 - V-SFT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47759 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47759"> read more </a> </article> <hr> <article> <h3> CVE-2025-47760 - Apache V-SFT Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47760 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6MemInIF!set_temp_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47760"> read more </a> </article> <hr> <article> <h3> CVE-2025-4917 - PHPGurukul Auto Taxi Stand Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4917 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4917"> read more </a> </article> <hr> <article> <h3> CVE-2025-4923 - SourceCodester Client Database Management System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4923 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_delivery_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4923"> read more </a> </article> <hr> <article> <h3> CVE-2025-47753 - V-SFT SFT Edit Out-of-Bounds Read </h3> <p> <strong>CVE ID : </strong>CVE-2025-47753 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47753"> read more </a> </article> <hr> <article> <h3> CVE-2025-47754 - V-SFT EditData Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47754 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!Conv_Macro_Data function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47754"> read more </a> </article> <hr> <article> <h3> CVE-2025-47755 - SFT VS Out-of-Bounds Read Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47755 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4_SaveEnvFile function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47755"> read more </a> </article> <hr> <article> <h3> CVE-2025-47756 - V-SFT VS6 Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47756 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::set_mr400_strc function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47756"> read more </a> </article> <hr> <article> <h3> CVE-2025-47757 - Adobe VSFT Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47757 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll!set_plc_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47757"> read more </a> </article> <hr> <article> <h3> CVE-2025-46801 - PgPool Global Development Group Pgpool-II Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46801 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46801"> read more </a> </article> <hr> <article> <h3> CVE-2025-47749 - SFT VS6 Edit Data Pointer Corruption Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-47749 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47749"> read more </a> </article> <hr> <article> <h3> CVE-2025-47750 - SFT VS Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47750 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6MemInIF!set_temp_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47750"> read more </a> </article> <hr> <article> <h3> CVE-2025-47751 - V-SFT Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47751 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6EditData!CDataRomErrorCheck::MacroCommandCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47751"> read more </a> </article> <hr> <article> <h3> CVE-2025-47752 - Adobe V-SFT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47752 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6ComFile!MakeItemGlidZahyou function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47752"> read more </a> </article> <hr> <article> <h3> CVE-2025-37891 - ALSA UMP Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37891 <br> <strong>Published : </strong> May 19, 2025, 8:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and its size is 4, as it was supposed to be the max size for a MIDI1 UMP packet data. However, the implementation overlooked that SysEx is handled in a different format, and it can be up to 6 bytes, as found in do_convert_to_ump(). It leads eventually to a buffer overflow, and may corrupt the memory when a longer SysEx message is received. The fix is simply to extend the buffer size to 6 to fit with the SysEx UMP message. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37891"> read more </a> </article> <hr> <article> <h3> CVE-2025-4915 - PHPGurukul Auto Taxi Stand Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4915 <br> <strong>Published : </strong> May 19, 2025, 7:15 a.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/auto-taxi-entry-detail.php. The manipulation of the argument price leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4915"> read more </a> </article> <hr> <article> <h3> CVE-2025-4916 - PHPGurukul Auto Taxi Stand Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4916 <br> <strong>Published : </strong> May 19, 2025, 7:15 a.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4916"> read more </a> </article> <hr> <article> <h3> CVE-2025-4914 - PHPGurukul Auto Taxi Stand Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4914 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4914"> read more </a> </article> <hr> <article> <h3> CVE-2025-1625 - Qi Blocks WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1625 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1625"> read more </a> </article> <hr> <article> <h3> CVE-2025-1626 - Qi Blocks WordPress Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-1626 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1626"> read more </a> </article> <hr> <article> <h3> CVE-2025-1627 - Qi Blocks WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1627 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1627"> read more </a> </article> <hr> <article> <h3> CVE-2025-2524 - Ninja Forms WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2524 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2524"> read more </a> </article> <hr> <article> <h3> CVE-2025-2560 - Ninja Forms Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2560 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2560"> read more </a> </article> <hr> <article> <h3> CVE-2025-2561 - Ninja Forms Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2561 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2561"> read more </a> </article> <hr> <article> <h3> CVE-2025-4477 - ThreatSonar Anti-Ransomware TeamT5 Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4477 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their privileges to highest administrator level through a specific API. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4477"> read more </a> </article> <hr> <article> <h3> CVE-2025-4913 - PHPGurukul Auto Taxi Stand Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4913 <br> <strong>Published : </strong> May 19, 2025, 6:15 a.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4913"> read more </a> </article> <hr> <article> <h3> CVE-2025-2892 - WordPress All in One SEO Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2892 <br> <strong>Published : </strong> May 19, 2025, 5:15 a.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post Meta Description and Canonical URL parameters in all versions up to, and including, 4.8.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2892"> read more </a> </article> <hr> <article> <h3> CVE-2025-4911 - A vulnerability, which was classified as critical, </h3> <p> <strong>CVE ID : </strong>CVE-2025-4911 <br> <strong>Published : </strong> May 19, 2025, 5:15 a.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4911"> read more </a> </article> <hr> <article> <h3> CVE-2025-4912 - SourceCodester Student Result Management System Image File Handler Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4912 <br> <strong>Published : </strong> May 19, 2025, 5:15 a.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/update_student.php of the component Image File Handler. The manipulation of the argument old_photo leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4912"> read more </a> </article> <hr> <article> <h3> CVE-2025-4909 - SourceCodester Client Database Management System Directory Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-4909 <br> <strong>Published : </strong> May 19, 2025, 4:15 a.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4909"> read more </a> </article> <hr> <article> <h3> CVE-2025-4910 - PHPGurukul Zoo Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4910 <br> <strong>Published : </strong> May 19, 2025, 4:15 a.m. | 4 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4910"> read more </a> </article> <hr> <article> <h3> CVE-2025-4906 - "PHPGurukul Notice Board System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4906 <br> <strong>Published : </strong> May 19, 2025, 3:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4906"> read more </a> </article> <hr> <article> <h3> CVE-2025-4907 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4907 <br> <strong>Published : </strong> May 19, 2025, 3:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4907"> read more </a> </article> <hr> <article> <h3> CVE-2025-4908 - PHPGurukul Daily Expense Tracker System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4908 <br> <strong>Published : </strong> May 19, 2025, 3:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4908"> read more </a> </article> <hr> <article> <h3> CVE-2025-23123 - UBTech UniFi Protect Camera Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23123 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23123"> read more </a> </article> <hr> <article> <h3> CVE-2025-23164 - Unifi Protect Permanent Livestream Access Token Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23164 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23164"> read more </a> </article> <hr> <article> <h3> CVE-2025-23165 - Node.js ReadFileUtf8 Memory Leak Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-23165 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23165"> read more </a> </article> <hr> <article> <h3> CVE-2025-23166 - Node.js Cryptographic Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23166 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23166"> read more </a> </article> <hr> <article> <h3> CVE-2025-23167 - Node.js HTTP Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23167 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23167"> read more </a> </article> <hr> <article> <h3> CVE-2025-4905 - Apache iop-apl-uw Basestation3 Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4905 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function load_qc_pickl of the file basestation3/QC.py. The manipulation of the argument qc_file leads to deserialization. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The code maintainer tagged the issue as closed. But there is no new commit nor release in the GitHub repository available so far. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4905"> read more </a> </article> <hr> <article> <h3> CVE-2025-23122 - Node.js ReadFileUtf8 Memory Leak Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-23122 <br> <strong>Published : </strong> May 19, 2025, 2:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Impact: * This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23122"> read more </a> </article> <hr> <article> <h3> CVE-2025-4904 - D-Link DI-7003GV2 Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4904 <br> <strong>Published : </strong> May 19, 2025, 1:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4904"> read more </a> </article> <hr> <article> <h3> CVE-2025-4902 - D-Link DI-7003GV2 Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4902 <br> <strong>Published : </strong> May 19, 2025, 1:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this issue is the function sub_48F4F0 of the file /H5/versionupdate.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4902"> read more </a> </article> <hr> <article> <h3> CVE-2025-4903 - D-Link DI-7003GV2 Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4903 <br> <strong>Published : </strong> May 19, 2025, 1:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restart. The manipulation leads to unverified password change. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4903"> read more </a> </article> <hr> <article> <h3> CVE-2025-4901 - D-Link DI-7003GV2 HTTP Endpoint Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4901 <br> <strong>Published : </strong> May 19, 2025, 12:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 19 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4901"> read more </a> </article> <hr> <article> <h3> CVE-2025-4899 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4899 <br> <strong>Published : </strong> May 18, 2025, 11:15 p.m. | 7 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4899"> read more </a> </article> <hr> <article> <h3> CVE-2025-4900 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4900 <br> <strong>Published : </strong> May 18, 2025, 11:15 p.m. | 7 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4900"> read more </a> </article> <hr> <article> <h3> CVE-2025-4897 - Tenda A15 HTTP POST Request Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4897 <br> <strong>Published : </strong> May 18, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4897"> read more </a> </article> <hr> <article> <h3> CVE-2025-4898 - SourceCodester Student Result Management System Logo File Handler Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4898 <br> <strong>Published : </strong> May 18, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file update_system.php of the component Logo File Handler. The manipulation of the argument old_logo leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4898"> read more </a> </article> <hr> <article> <h3> CVE-2025-4895 - SourceCodester Doctors Appointment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4895 <br> <strong>Published : </strong> May 18, 2025, 9:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4895"> read more </a> </article> <hr> <article> <h3> CVE-2025-4896 - Tenda AC10 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4896 <br> <strong>Published : </strong> May 18, 2025, 9:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/UserCongratulationsExec. The manipulation of the argument getuid leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4896"> read more </a> </article> <hr> <article> <h3> CVE-2025-4893 - Jammy928 CoinExchange CryptoExchange Java File Upload Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4893 <br> <strong>Published : </strong> May 18, 2025, 8:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4893"> read more </a> </article> <hr> <article> <h3> CVE-2025-4894 - Calmkart Django-sso-server RSA Key Encryption Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-4894 <br> <strong>Published : </strong> May 18, 2025, 8:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function gen_rsa_keys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4894"> read more </a> </article> <hr> <article> <h3> CVE-2025-4891 - Apache Code-projects Police Station Management System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4891 <br> <strong>Published : </strong> May 18, 2025, 7:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4891"> read more </a> </article> <hr> <article> <h3> CVE-2025-4892 - "Code-projects Police Station Management System Stack-Based Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4892 <br> <strong>Published : </strong> May 18, 2025, 7:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function criminal::remove of the file source.cpp of the component Delete Record. The manipulation of the argument No leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4892"> read more </a> </article> <hr> <article> <h3> CVE-2025-4890 - Code-projects Tourism Management System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4890 <br> <strong>Published : </strong> May 18, 2025, 6:15 p.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4890"> read more </a> </article> <hr> <article> <h3> CVE-2025-4889 - Code-projects Tourism Management System Buffer Overflow Vulnerability in User Registration Component </h3> <p> <strong>CVE ID : </strong>CVE-2025-4889 <br> <strong>Published : </strong> May 18, 2025, 6:15 p.m. | 8 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4889"> read more </a> </article> <hr> <article> <h3> CVE-2025-4887 - SourceCodester Online Student Clearance System Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4887 <br> <strong>Published : </strong> May 18, 2025, 5:15 p.m. | 9 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4887"> read more </a> </article> <hr> <article> <h3> CVE-2025-4888 - Code-projects Pharmacy Management System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4888 <br> <strong>Published : </strong> May 18, 2025, 5:15 p.m. | 9 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4888"> read more </a> </article> <hr> <article> <h3> CVE-2025-4885 - iSourcecode Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4885 <br> <strong>Published : </strong> May 18, 2025, 4:15 p.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4885"> read more </a> </article> <hr> <article> <h3> CVE-2025-4886 - iSourcecode Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4886 <br> <strong>Published : </strong> May 18, 2025, 4:15 p.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4886"> read more </a> </article> <hr> <article> <h3> CVE-2025-48219 - O2 UK IMS E-UTRAN Cell Identity Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-48219 <br> <strong>Published : </strong> May 18, 2025, 3:15 p.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>O2 UK through 2025-05-17 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI (E-UTRAN Cell Identity) leak. The Cell ID might be usable to identify a cell location via crowdsourced data, and might correspond to a small physical area (e.g., if the called party is in a city centre). Removal of the Cellular-Network-Info header is mentioned in section 4.4.19 of ETSI TS 124 229. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48219"> read more </a> </article> <hr> <article> <h3> CVE-2025-4883 - D-Link DI-8100 ASP Context Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4883 <br> <strong>Published : </strong> May 18, 2025, 3:15 p.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/defOther leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4883"> read more </a> </article> <hr> <article> <h3> CVE-2025-4884 - iSourcecode Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4884 <br> <strong>Published : </strong> May 18, 2025, 3:15 p.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/assign_save.php. The manipulation of the argument team leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4884"> read more </a> </article> <hr> <article> <h3> CVE-2025-4881 - iSourcecode Restaurant Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4881 <br> <strong>Published : </strong> May 18, 2025, 2:15 p.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user_save.php. The manipulation of the argument username/name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4881"> read more </a> </article> <hr> <article> <h3> CVE-2025-4882 - iSourcecode Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4882 <br> <strong>Published : </strong> May 18, 2025, 2:15 p.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_update.php. The manipulation of the argument team leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4882"> read more </a> </article> <hr> <article> <h3> CVE-2025-4875 - Campcodes Online Shopping Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4875 <br> <strong>Published : </strong> May 18, 2025, 1:15 p.m. | 12 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4875"> read more </a> </article> <hr> <article> <h3> CVE-2025-4880 - PHPGurukul News Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4880 <br> <strong>Published : </strong> May 18, 2025, 1:15 p.m. | 12 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4880"> read more </a> </article> <hr> <article> <h3> CVE-2025-4874 - "PHPGurukul News Portal Project SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4874 <br> <strong>Published : </strong> May 18, 2025, 12:15 p.m. | 13 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4874"> read more </a> </article> <hr> <article> <h3> CVE-2025-4873 - PHPGurukul News Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4873 <br> <strong>Published : </strong> May 18, 2025, 12:15 p.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4873"> read more </a> </article> <hr> <article> <h3> CVE-2025-4871 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4871 <br> <strong>Published : </strong> May 18, 2025, 11:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4871"> read more </a> </article> <hr> <article> <h3> CVE-2025-4872 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4872 <br> <strong>Published : </strong> May 18, 2025, 11:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component CCC Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4872"> read more </a> </article> <hr> <article> <h3> CVE-2025-4869 - iSourcecode Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4869 <br> <strong>Published : </strong> May 18, 2025, 10:15 a.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4869"> read more </a> </article> <hr> <article> <h3> CVE-2025-4870 - iSourcecode Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4870 <br> <strong>Published : </strong> May 18, 2025, 10:15 a.m. | 12 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4870"> read more </a> </article> <hr> <article> <h3> CVE-2025-4867 - Tenda A15 Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4867 <br> <strong>Published : </strong> May 18, 2025, 9:15 a.m. | 11 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4867"> read more </a> </article> <hr> <article> <h3> CVE-2025-4868 - Merikbest Ecommerce-Spring-Reactjs Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4868 <br> <strong>Published : </strong> May 18, 2025, 9:15 a.m. | 11 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/admin/ of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4868"> read more </a> </article> <hr> <article> <h3> CVE-2025-4865 - iSourcecode Restaurant Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4865 <br> <strong>Published : </strong> May 18, 2025, 8:15 a.m. | 12 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4865"> read more </a> </article> <hr> <article> <h3> CVE-2025-4866 - Weibocom Rill-Flow Management Console Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4866 <br> <strong>Published : </strong> May 18, 2025, 8:15 a.m. | 12 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4866"> read more </a> </article> <hr> <article> <h3> CVE-2025-4863 - Advaya Softech GEMS ERP Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4863 <br> <strong>Published : </strong> May 18, 2025, 7:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. This affects an unknown part of the file /studentLogin/studentLogin.action. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4863"> read more </a> </article> <hr> <article> <h3> CVE-2025-4864 - iSourcecode Restaurant Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4864 <br> <strong>Published : </strong> May 18, 2025, 7:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4864"> read more </a> </article> <hr> <article> <h3> CVE-2025-4861 - PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4861 <br> <strong>Published : </strong> May 18, 2025, 6:15 a.m. | 12 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4861"> read more </a> </article> <hr> <article> <h3> CVE-2025-4862 - PHPGurukul Directory Management System Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4862 <br> <strong>Published : </strong> May 18, 2025, 6:15 a.m. | 12 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /searchdata.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4862"> read more </a> </article> <hr> <article> <h3> CVE-2025-3715 - WordPress Bold Page Builder Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3715 <br> <strong>Published : </strong> May 18, 2025, 6:15 a.m. | 10 hours, 32 minutes ago <br> <strong>Description : </strong>The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text parameter in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3715"> read more </a> </article> <hr> <article> <h3> CVE-2025-4860 - D-Link DAP-2695 DHCPS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4860 <br> <strong>Published : </strong> May 18, 2025, 5:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Affected is an unknown function of the file /adv_dhcps.php of the component Static Pool Settings Page. The manipulation of the argument f_mac leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4860"> read more </a> </article> <hr> <article> <h3> CVE-2025-4859 - D-Link DAP-2695 Cross-Site Scripting in MAC Bypass Settings Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-4859 <br> <strong>Published : </strong> May 18, 2025, 5:15 a.m. | 11 hours ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been rated as problematic. This issue affects some unknown processing of the file /adv_macbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument f_mac leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4859"> read more </a> </article> <hr> <article> <h3> CVE-2025-4858 - D-Link ARP Spoofing Prevention Page Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4858 <br> <strong>Published : </strong> May 18, 2025, 4:15 a.m. | 12 hours ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unknown code of the file /adv_arpspoofing.php of the component ARP Spoofing Prevention Page. The manipulation of the argument harp_mac leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4858"> read more </a> </article> <hr> <article> <h3> CVE-2025-4851 - TOTOLINK N300RH Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4851 <br> <strong>Published : </strong> May 18, 2025, 4:15 a.m. | 10 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4851"> read more </a> </article> <hr> <article> <h3> CVE-2025-4852 - TOTOLINK A3002R Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4852 <br> <strong>Published : </strong> May 18, 2025, 4:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011. This issue affects some unknown processing of the component VPN Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4852"> read more </a> </article> <hr> <article> <h3> CVE-2025-4850 - TOTOLINK N300RH Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4850 <br> <strong>Published : </strong> May 18, 2025, 3:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4850"> read more </a> </article> <hr> <article> <h3> CVE-2025-4848 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4848 <br> <strong>Published : </strong> May 18, 2025, 3:15 a.m. | 11 hours ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RECV Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4848"> read more </a> </article> <hr> <article> <h3> CVE-2025-4849 - TOTOLINK N300RH Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4849 <br> <strong>Published : </strong> May 18, 2025, 3:15 a.m. | 11 hours ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4849"> read more </a> </article> <hr> <article> <h3> CVE-2025-4847 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4847 <br> <strong>Published : </strong> May 18, 2025, 2:15 a.m. | 10 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component MLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4847"> read more </a> </article> <hr> <article> <h3> CVE-2025-4846 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4846 <br> <strong>Published : </strong> May 18, 2025, 1:15 a.m. | 11 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4846"> read more </a> </article> <hr> <article> <h3> CVE-2025-4845 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4845 <br> <strong>Published : </strong> May 18, 2025, 1:15 a.m. | 11 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component TRACE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4845"> read more </a> </article> <hr> <article> <h3> CVE-2025-4844 - FreeFloat FTP Server CD Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4844 <br> <strong>Published : </strong> May 18, 2025, 12:15 a.m. | 12 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component CD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4844"> read more </a> </article> <hr> <article> <h3> CVE-2025-4843 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4843 <br> <strong>Published : </strong> May 18, 2025, 12:15 a.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 18 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4843"> read more </a> </article> <hr> <article> <h3> CVE-2025-4842 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4842 <br> <strong>Published : </strong> May 17, 2025, 11:15 p.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. This vulnerability affects the function isUCPCameraNameChanged of the file /sbin/ucp. The manipulation of the argument CameraName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4842"> read more </a> </article> <hr> <article> <h3> CVE-2025-4841 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4841 <br> <strong>Published : </strong> May 17, 2025, 11:15 p.m. | 10 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DCS-932L 2.18.01 and classified as critical. Affected by this issue is the function sub_404780 of the file /bin/gpio. The manipulation of the argument CameraName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4841"> read more </a> </article> <hr> <article> <h3> CVE-2025-4921 - Firefox JavaScript Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4921 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 11 hours, 59 minutes ago <br> <strong>Description : </strong>An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4921"> read more </a> </article> <hr> <article> <h3> CVE-2025-4919 - Mozilla Firefox Out-of-Bounds JavaScript Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4919 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4919"> read more </a> </article> <hr> <article> <h3> CVE-2025-4920 - Mozilla Firefox Promise Object Out-of-Bounds Read/Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4920 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4920"> read more </a> </article> <hr> <article> <h3> CVE-2025-4839 - Itwanger Paicoding Cross-Domain Policy Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4839 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4839"> read more </a> </article> <hr> <article> <h3> CVE-2025-4918 - Firefox ESR JavaScript Promise Out-of-Bounds Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-4918 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox ESR < 115.23.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4918"> read more </a> </article> <hr> <article> <h3> CVE-2025-4838 - Kanwangzjm Funiture Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4838 <br> <strong>Published : </strong> May 17, 2025, 10:15 p.m. | 8 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function doPost of the file /funiture-master/src/main/java/com/app/mvc/acl/servlet/LoginServlet.java of the component Login. The manipulation of the argument ret leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4838"> read more </a> </article> <hr> <article> <h3> CVE-2025-4837 - Projectworlds Student Project Allocation System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4837 <br> <strong>Published : </strong> May 17, 2025, 9:15 p.m. | 9 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. This affects an unknown part of the file /make_group_sql.php. The manipulation of the argument mem1/mem2/mem3 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4837"> read more </a> </article> <hr> <article> <h3> CVE-2024-13965 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-13965 <br> <strong>Published : </strong> May 17, 2025, 8:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>Rejected reason: wrong year <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13965"> read more </a> </article> <hr> <article> <h3> CVE-2025-4835 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4835 <br> <strong>Published : </strong> May 17, 2025, 8:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4835"> read more </a> </article> <hr> <article> <h3> CVE-2025-4836 - Projectworlds Life Insurance Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4836 <br> <strong>Published : </strong> May 17, 2025, 8:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /deleteAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4836"> read more </a> </article> <hr> <article> <h3> CVE-2024-13964 - Here is a title for the vulnerability:Apache Struts Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2024-13964 <br> <strong>Published : </strong> May 17, 2025, 8:15 p.m. | 7 hours, 59 minutes ago <br> <strong>Description : </strong>Rejected reason: wrong year <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13964"> read more </a> </article> <hr> <article> <h3> CVE-2025-47945 - Donetick Weak Default JWT Signing Secret in Donetick Task Management App </h3> <p> <strong>CVE ID : </strong>CVE-2025-47945 <br> <strong>Published : </strong> May 17, 2025, 7:15 p.m. | 8 hours, 58 minutes ago <br> <strong>Description : </strong>Donetick an open-source app for managing tasks and chores. Prior to version 0.1.44, the application uses JSON Web Tokens (JWT) for authentication, but the signing secret has a weak default value. While the responsibility is left to the system administrator to change it, this approach is inadequate. The vulnerability is proven by existence of the issue in the live version as well. This issue can result in full account takeover of any user. Version 0.1.44 contains a patch. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47945"> read more </a> </article> <hr> <article> <h3> CVE-2025-47948 - Cocotais Bot Privileged Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47948 <br> <strong>Published : </strong> May 17, 2025, 7:15 p.m. | 8 hours, 58 minutes ago <br> <strong>Description : </strong>Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to version 1.6.2, command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized user can use the `/echo <qqbot-at-everyone />` command to cause the bot to send a message that mentions all members in the chat, bypassing any permission controls. This can lead to spam, disruption, or abuse of notification systems. Version 1.6.2 contains a patch for the issue. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47948"> read more </a> </article> <hr> <article> <h3> CVE-2025-4834 - TOTOLINK A702R, A3002R, A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4834 <br> <strong>Published : </strong> May 17, 2025, 7:15 p.m. | 8 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4834"> read more </a> </article> <hr> <article> <h3> CVE-2025-4833 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4833 <br> <strong>Published : </strong> May 17, 2025, 6:15 p.m. | 9 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This issue affects some unknown processing of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4833"> read more </a> </article> <hr> <article> <h3> CVE-2025-4831 - TOTOLINK HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4831 <br> <strong>Published : </strong> May 17, 2025, 5:15 p.m. | 9 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formSiteSurveyProfile of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4831"> read more </a> </article> <hr> <article> <h3> CVE-2025-4832 - TOTOLINK HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4832 <br> <strong>Published : </strong> May 17, 2025, 5:15 p.m. | 9 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4832"> read more </a> </article> <hr> <article> <h3> CVE-2025-4830 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4830 <br> <strong>Published : </strong> May 17, 2025, 4:15 p.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this issue is some unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4830"> read more </a> </article> <hr> <article> <h3> CVE-2025-47931 - LibreNMS Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47931 <br> <strong>Published : </strong> May 17, 2025, 4:15 p.m. | 9 hours, 58 minutes ago <br> <strong>Description : </strong>LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Site Scripting (XSS) Vulnerability in the `group name` parameter of the `http://localhost/poller/groups` form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. LibreNMS v25.5.0 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47931"> read more </a> </article> <hr> <article> <h3> CVE-2025-33103 - IBM i TCP/IP Connectivity Utilities for i Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33103 <br> <strong>Published : </strong> May 17, 2025, 4:15 p.m. | 7 hours, 58 minutes ago <br> <strong>Description : </strong>IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33103"> read more </a> </article> <hr> <article> <h3> CVE-2025-47273 - Setuptools Remote Code Execution via Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-47273 <br> <strong>Published : </strong> May 17, 2025, 4:15 p.m. | 7 hours, 58 minutes ago <br> <strong>Description : </strong>setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47273"> read more </a> </article> <hr> <article> <h3> CVE-2025-4827 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4827 <br> <strong>Published : </strong> May 17, 2025, 3:15 p.m. | 8 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4827"> read more </a> </article> <hr> <article> <h3> CVE-2025-4829 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4829 <br> <strong>Published : </strong> May 17, 2025, 3:15 p.m. | 8 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function sub_40BE30 of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4829"> read more </a> </article> <hr> <article> <h3> CVE-2025-48187 - RAGFlow Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-48187 <br> <strong>Published : </strong> May 17, 2025, 1:15 p.m. | 9 hours, 53 minutes ago <br> <strong>Description : </strong>RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to perform arbitrary account registration, login, and password reset. Codes are six digits and there is no rate limiting. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48187"> read more </a> </article> <hr> <article> <h3> CVE-2025-4101 - MultiVendorX WooCommerce Multivendor Marketplace Solutions Unauthenticated Data Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4101 <br> <strong>Published : </strong> May 17, 2025, 1:15 p.m. | 9 hours, 53 minutes ago <br> <strong>Description : </strong>The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4101"> read more </a> </article> <hr> <article> <h3> CVE-2024-13613 - Wise Chat WordPress Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2024-13613 <br> <strong>Published : </strong> May 17, 2025, 12:15 p.m. | 8 hours, 32 minutes ago <br> <strong>Description : </strong>The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can contain file attachments included in chat messages. The vulnerability was partially patched in version 3.3.3. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13613"> read more </a> </article> <hr> <article> <h3> CVE-2025-3527 - WordPress EventON Pro Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3527 <br> <strong>Published : </strong> May 17, 2025, 12:15 p.m. | 8 hours, 32 minutes ago <br> <strong>Description : </strong>The EventON Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'assets/lib/settings/settings.js' file in all versions up to, and including, 4.9.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 4.9.6. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3527"> read more </a> </article> <hr> <article> <h3> CVE-2025-3888 - "Jupiter X Core Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3888 <br> <strong>Published : </strong> May 17, 2025, 12:15 p.m. | 8 hours, 32 minutes ago <br> <strong>Description : </strong>The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the page with the included SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3888"> read more </a> </article> <hr> <article> <h3> CVE-2025-4669 - WordPress Booking Calendar Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4669 <br> <strong>Published : </strong> May 17, 2025, 12:15 p.m. | 8 hours, 32 minutes ago <br> <strong>Description : </strong>The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpbc shortcode in all versions up to, and including, 10.11.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4669"> read more </a> </article> <hr> <article> <h3> CVE-2025-4826 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4826 <br> <strong>Published : </strong> May 17, 2025, 11:15 a.m. | 9 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4826"> read more </a> </article> <hr> <article> <h3> CVE-2025-4824 - TOTOLINK A702R, A3002R, A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4824 <br> <strong>Published : </strong> May 17, 2025, 10:15 a.m. | 10 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4824"> read more </a> </article> <hr> <article> <h3> CVE-2025-4825 - TOTOLINK A702R/A3002R/A3002RU HTTP POST Request Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4825 <br> <strong>Published : </strong> May 17, 2025, 10:15 a.m. | 10 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4825"> read more </a> </article> <hr> <article> <h3> CVE-2025-4610 - WordPress WP-Members Membership Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4610 <br> <strong>Published : </strong> May 17, 2025, 10:15 a.m. | 9 hours, 58 minutes ago <br> <strong>Description : </strong>The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmem_user_memberships shortcode in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4610"> read more </a> </article> <hr> <article> <h3> CVE-2025-4823 - TOTOLINK HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4823 <br> <strong>Published : </strong> May 17, 2025, 10:15 a.m. | 9 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is the function submit-url of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4823"> read more </a> </article> <hr> <article> <h3> CVE-2025-4391 - WordPress Echo RSS Feed Post Generator Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4391 <br> <strong>Published : </strong> May 17, 2025, 6:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4391"> read more </a> </article> <hr> <article> <h3> CVE-2025-4819 - Y_Project RuoYi Remote Improper Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4819 <br> <strong>Published : </strong> May 17, 2025, 6:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in y_project RuoYi 4.8.0. Affected is an unknown function of the file /monitor/online/batchForceLogout of the component Offline Logout. The manipulation of the argument ids leads to improper authorization. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4819"> read more </a> </article> <hr> <article> <h3> CVE-2025-3812 - WordPress WPBot Pro File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3812 <br> <strong>Published : </strong> May 17, 2025, 6:15 a.m. | 12 hours, 32 minutes ago <br> <strong>Description : </strong>The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the qcld_openai_delete_training_file() function in all versions up to, and including, 13.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3812"> read more </a> </article> <hr> <article> <h3> CVE-2025-4190 - WordPress CSV Mass Importer File Upload Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4190 <br> <strong>Published : </strong> May 17, 2025, 6:15 a.m. | 12 hours, 32 minutes ago <br> <strong>Description : </strong>The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4190"> read more </a> </article> <hr> <article> <h3> CVE-2025-4389 - "WordPress Crawlomatic Multipage Scraper Plugin Arbitrary File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4389 <br> <strong>Published : </strong> May 17, 2025, 6:15 a.m. | 12 hours, 32 minutes ago <br> <strong>Description : </strong>The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4389"> read more </a> </article> <hr> <article> <h3> CVE-2025-4818 - SourceCodester Doctor's Appointment System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4818 <br> <strong>Published : </strong> May 17, 2025, 5:15 a.m. | 12 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/delete-doctor.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4818"> read more </a> </article> <hr> <article> <h3> CVE-2025-4189 - WordPress Audio Comments Plugin CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-4189 <br> <strong>Published : </strong> May 17, 2025, 4:16 a.m. | 11 hours, 57 minutes ago <br> <strong>Description : </strong>The Audio Comments Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation on the 'audio-comments/audior-settings.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4189"> read more </a> </article> <hr> <article> <h3> CVE-2025-4194 - WordPress AlT Monitoring CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-4194 <br> <strong>Published : </strong> May 17, 2025, 4:16 a.m. | 11 hours, 57 minutes ago <br> <strong>Description : </strong>The AlT Monitoring plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the 'ALT_Monitoring_edit' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4194"> read more </a> </article> <hr> <article> <h3> CVE-2025-4816 - SourceCodester Doctor's Appointment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4816 <br> <strong>Published : </strong> May 17, 2025, 4:16 a.m. | 11 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4816"> read more </a> </article> <hr> <article> <h3> CVE-2025-4817 - Sourcecodester Doctor's Appointment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4817 <br> <strong>Published : </strong> May 17, 2025, 4:16 a.m. | 11 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete-appointment.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4817"> read more </a> </article> <hr> <article> <h3> CVE-2025-4814 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4814 <br> <strong>Published : </strong> May 17, 2025, 3:17 a.m. | 12 hours, 56 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_add.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 03:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4814"> read more </a> </article> <hr> <article> <h3> CVE-2025-4815 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4815 <br> <strong>Published : </strong> May 17, 2025, 3:17 a.m. | 12 hours, 56 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/supplier_update.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 03:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4815"> read more </a> </article> <hr> <article> <h3> CVE-2024-47893 - VMware GPU Firmware Memory Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-47893 <br> <strong>Published : </strong> May 17, 2025, 1:15 a.m. | 13 hours, 47 minutes ago <br> <strong>Description : </strong>Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47893"> read more </a> </article> <hr> <article> <h3> CVE-2025-1706 - Adobe Flash Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1706 <br> <strong>Published : </strong> May 17, 2025, 1:15 a.m. | 13 hours, 47 minutes ago <br> <strong>Description : </strong>Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 17 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1706"> read more </a> </article> <hr> <article> <h3> CVE-2025-4812 - PHPGurukul Human Metapneumovirus Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4812 <br> <strong>Published : </strong> May 16, 2025, 10:15 p.m. | 14 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4812"> read more </a> </article> <hr> <article> <h3> CVE-2025-4813 - PHPGurukul Human Metapneumovirus Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4813 <br> <strong>Published : </strong> May 16, 2025, 10:15 p.m. | 14 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4813"> read more </a> </article> <hr> <article> <h3> CVE-2025-4804 - WatchGuard Fireware OS Stored Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4804 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 14 hours, 57 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through 12.11.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4804"> read more </a> </article> <hr> <article> <h3> CVE-2025-4805 - WatchGuard Fireware OS Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4805 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 14 hours, 57 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through 12.11.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4805"> read more </a> </article> <hr> <article> <h3> CVE-2025-4810 - Tenda AC7 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4810 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 14 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument reboot_time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4810"> read more </a> </article> <hr> <article> <h3> CVE-2025-4811 - CodeAstro Pharmacy Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4811 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 14 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeAstro Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4811"> read more </a> </article> <hr> <article> <h3> CVE-2025-48188 - GNU PSPP libpspp-core.a Heap-Based Buffer Over-Read </h3> <p> <strong>CVE ID : </strong>CVE-2025-48188 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 13 hours, 45 minutes ago <br> <strong>Description : </strong>libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48188"> read more </a> </article> <hr> <article> <h3> CVE-2022-4363 - Wholesale Market WooCommerce CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-4363 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 12 hours, 57 minutes ago <br> <strong>Description : </strong>The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-4363"> read more </a> </article> <hr> <article> <h3> CVE-2025-32407 - Samsung Internet for Galaxy Watch TLS Certificate Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-32407 <br> <strong>Published : </strong> May 16, 2025, 9:15 p.m. | 12 hours, 57 minutes ago <br> <strong>Description : </strong>Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the identity of the server. It negates the use of HTTPS as a secure channel, allowing for Man-in-the-Middle attacks, stealing sensitive information or modifying incoming and outgoing traffic. NOTE: This vulnerability is in an end-of-life product that is no longer maintained by the vendor. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32407"> read more </a> </article> <hr> <article> <h3> CVE-2025-4808 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4808 <br> <strong>Published : </strong> May 16, 2025, 8:15 p.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0 and classified as critical. This issue affects some unknown processing of the file /add-normal-ticket.php. The manipulation of the argument noadult leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4808"> read more </a> </article> <hr> <article> <h3> CVE-2025-4809 - Tenda AC7 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4809 <br> <strong>Published : </strong> May 16, 2025, 8:15 p.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4809"> read more </a> </article> <hr> <article> <h3> CVE-2025-22233 - Spring Framework Disallowed Fields Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22233 <br> <strong>Published : </strong> May 16, 2025, 8:15 p.m. | 9 hours, 57 minutes ago <br> <strong>Description : </strong>CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: * 6.2.0 - 6.2.6 * 6.1.0 - 6.1.19 * 6.0.0 - 6.0.27 * 5.3.0 - 5.3.42 * Older, unsupported versions are also affected Mitigation Users of affected versions should upgrade to the corresponding fixed version. Affected version(s)Fix Version Availability 6.2.x 6.2.7 OSS6.1.x 6.1.20 OSS6.0.x 6.0.28 Commercial https://enterprise.spring.io/ 5.3.x 5.3.43 Commercial https://enterprise.spring.io/ No further mitigation steps are necessary. Generally, we recommend using a dedicated model object with properties only for data binding, or using constructor binding since constructor arguments explicitly declare what to bind together with turning off setter binding through the declarativeBinding flag. See the Model Design section in the reference documentation. For setting binding, prefer the use of allowedFields (an explicit list) over disallowedFields. Credit This issue was responsibly reported by the TERASOLUNA Framework Development Team from NTT DATA Group Corporation. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22233"> read more </a> </article> <hr> <article> <h3> CVE-2025-4802 - GNU C Library LD_LIBRARY_PATH Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4802 <br> <strong>Published : </strong> May 16, 2025, 8:15 p.m. | 9 hours, 57 minutes ago <br> <strong>Description : </strong>Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4802"> read more </a> </article> <hr> <article> <h3> CVE-2025-4807 - SourceCodester Online Student Clearance System Directory Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4807 <br> <strong>Published : </strong> May 16, 2025, 8:15 p.m. | 9 hours, 57 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4807"> read more </a> </article> <hr> <article> <h3> CVE-2025-4795 - Gongfuxiang SchoolCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4795 <br> <strong>Published : </strong> May 16, 2025, 7:15 p.m. | 10 hours, 56 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4795"> read more </a> </article> <hr> <article> <h3> CVE-2025-4806 - SourceCodester Oretnom23 Stock Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4806 <br> <strong>Published : </strong> May 16, 2025, 7:15 p.m. | 10 hours, 56 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=back_order/view_bo. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4806"> read more </a> </article> <hr> <article> <h3> CVE-2025-4794 - PHPGurukul Online Course Registration SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4794 <br> <strong>Published : </strong> May 16, 2025, 6:16 p.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /news.php. The manipulation of the argument newstitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4794"> read more </a> </article> <hr> <article> <h3> CVE-2025-4476 - Apache Libsoup Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-4476 <br> <strong>Published : </strong> May 16, 2025, 6:16 p.m. | 10 hours, 3 minutes ago <br> <strong>Description : </strong>A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4476"> read more </a> </article> <hr> <article> <h3> CVE-2025-4792 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4792 <br> <strong>Published : </strong> May 16, 2025, 6:16 p.m. | 10 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4792"> read more </a> </article> <hr> <article> <h3> CVE-2025-4793 - PHPGurukul Online Course Registration SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4793 <br> <strong>Published : </strong> May 16, 2025, 6:16 p.m. | 10 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Course Registration 3.1. It has been classified as critical. Affected is an unknown function of the file /edit-student-profile.php. The manipulation of the argument cgpa leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4793"> read more </a> </article> <hr> <article> <h3> CVE-2025-4791 - FreeFloat FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4791 <br> <strong>Published : </strong> May 16, 2025, 5:15 p.m. | 11 hours, 3 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component HASH Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4791"> read more </a> </article> <hr> <article> <h3> CVE-2025-4789 - FreeFloat FTP Server LCD Command Handler Critical Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4789 <br> <strong>Published : </strong> May 16, 2025, 5:15 p.m. | 9 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4789"> read more </a> </article> <hr> <article> <h3> CVE-2025-4790 - FreeFloat FTP Server GLOB Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4790 <br> <strong>Published : </strong> May 16, 2025, 5:15 p.m. | 9 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component GLOB Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4790"> read more </a> </article> <hr> <article> <h3> CVE-2025-4788 - FreeFloat FTP Server DELETE Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4788 <br> <strong>Published : </strong> May 16, 2025, 5:15 p.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4788"> read more </a> </article> <hr> <article> <h3> CVE-2025-4787 - SourceCodester Oretnom23 Stock Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4787 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 8 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/view_sale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4787"> read more </a> </article> <hr> <article> <h3> CVE-2025-48132 - Pencilwp X Addons for Elementor Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48132 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor allows Stored XSS. This issue affects X Addons for Elementor: from n/a through 1.0.14. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48132"> read more </a> </article> <hr> <article> <h3> CVE-2025-48134 - ShapedPlugin LLC WP Tabs Object Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48134 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs allows Object Injection. This issue affects WP Tabs: from n/a through 2.2.11. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48134"> read more </a> </article> <hr> <article> <h3> CVE-2025-48135 - Aptivada for WP Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48135 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aptivadadev Aptivada for WP allows DOM-Based XSS. This issue affects Aptivada for WP: from n/a through 2.0.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48135"> read more </a> </article> <hr> <article> <h3> CVE-2025-48136 - Estatik Mortgage Calculator PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48136 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Estatik Mortgage Calculator Estatik allows PHP Local File Inclusion. This issue affects Mortgage Calculator Estatik: from n/a through 2.0.12. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48136"> read more </a> </article> <hr> <article> <h3> CVE-2025-48137 - Proxymis Interview SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-48137 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in proxymis Interview allows SQL Injection. This issue affects Interview: from n/a through 1.01. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48137"> read more </a> </article> <hr> <article> <h3> CVE-2025-48138 - BERTHA AI Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48138 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in berthaai BERTHA AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BERTHA AI: from n/a through 1.12.11. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48138"> read more </a> </article> <hr> <article> <h3> CVE-2025-48144 - Sidngr Import Export For WooCommerce CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48144 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in sidngr Import Export For WooCommerce allows Stored XSS. This issue affects Import Export For WooCommerce: from n/a through 1.6.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48144"> read more </a> </article> <hr> <article> <h3> CVE-2025-48146 - LupsOnline SEO Flow CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48146 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline allows Stored XSS. This issue affects SEO Flow by LupsOnline: from n/a through 2.2.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48146"> read more </a> </article> <hr> <article> <h3> CVE-2025-4786 - SourceCodester Oretnom23 Stock Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4786 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/view_return. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4786"> read more </a> </article> <hr> <article> <h3> CVE-2025-48117 - Kilbot WooCommerce POS Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48117 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in kilbot WooCommerce POS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce POS: from n/a through 1.7.8. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48117"> read more </a> </article> <hr> <article> <h3> CVE-2025-48119 - RS WP Book Showcase Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48119 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Control of Generation of Code ('Code Injection') vulnerability in RS WP THEMES RS WP Book Showcase allows Code Injection. This issue affects RS WP Book Showcase: from n/a through 6.7.41. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48119"> read more </a> </article> <hr> <article> <h3> CVE-2025-48120 - MapSVG Lite Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48120 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG Lite allows Code Injection. This issue affects MapSVG Lite: from n/a through 8.6.4. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48120"> read more </a> </article> <hr> <article> <h3> CVE-2025-48121 - Steve Puddick WP Notes Widget Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48121 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Puddick WP Notes Widget allows DOM-Based XSS. This issue affects WP Notes Widget: from n/a through 1.0.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48121"> read more </a> </article> <hr> <article> <h3> CVE-2025-48127 - "App Cheap Push Notification Authorization Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-48127 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in App Cheap Push notification for Mobile and Web app allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Push notification for Mobile and Web app: from n/a through 2.0.3. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48127"> read more </a> </article> <hr> <article> <h3> CVE-2025-48128 - Sharespine Woocommerce Connector Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48128 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Sharespine Sharespine Woocommerce Connector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sharespine Woocommerce Connector: from n/a through 4.7.55. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48128"> read more </a> </article> <hr> <article> <h3> CVE-2025-48131 - Elementor Lite Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48131 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite allows Stored XSS. This issue affects UltraAddons Elementor Lite: from n/a through 2.0.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48131"> read more </a> </article> <hr> <article> <h3> CVE-2025-47693 - FAT Services Booking PHP Local File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-47693 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking allows PHP Local File Inclusion. This issue affects FAT Services Booking: from n/a through 5.5. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47693"> read more </a> </article> <hr> <article> <h3> CVE-2025-48079 - Metagauss ProfileGrid Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48079 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Metagauss ProfileGrid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ProfileGrid : from n/a through 5.9.5.1. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48079"> read more </a> </article> <hr> <article> <h3> CVE-2025-48080 - Uncanny Owl Uncanny Toolkit for LearnDash Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48080 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Stored XSS. This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.7.0.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48080"> read more </a> </article> <hr> <article> <h3> CVE-2025-48112 - Karimmughal Cross-site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48112 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot html,php,xml etc pages allows Reflected XSS. This issue affects Dot html,php,xml etc pages: from n/a through 1.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48112"> read more </a> </article> <hr> <article> <h3> CVE-2025-48113 - Broadstreet Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-48113 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet allows Stored XSS. This issue affects Broadstreet: from n/a through 1.51.8. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48113"> read more </a> </article> <hr> <article> <h3> CVE-2025-48114 - ShayanWeb Admin FontChanger CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48114 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Shayan Farhang Pazhooh ShayanWeb Admin FontChanger allows Stored XSS. This issue affects ShayanWeb Admin FontChanger: from n/a through 1.8.1. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48114"> read more </a> </article> <hr> <article> <h3> CVE-2025-48115 - Javier Revilla ValidateCertify CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-48115 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Javier Revilla ValidateCertify allows Cross Site Request Forgery. This issue affects ValidateCertify: from n/a through 1.6.2. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48115"> read more </a> </article> <hr> <article> <h3> CVE-2025-48116 - EventON Missing Authorization </h3> <p> <strong>CVE ID : </strong>CVE-2025-48116 <br> <strong>Published : </strong> May 16, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Ashan Perera EventON allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EventON: from n/a through 2.4.4. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48116"> read more </a> </article> <hr> <article> <h3> CVE-2025-32962 - Flask-AppBuilder Host Header Open Redirection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32962 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 44 minutes ago <br> <strong>Description : </strong>Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection. As a workaround, use a reverse proxy to enforce trusted host headers. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32962"> read more </a> </article> <hr> <article> <h3> CVE-2025-47790 - Nextcloud Session Skipped Second Factor Confirmation </h3> <p> <strong>CVE ID : </strong>CVE-2025-47790 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 44 minutes ago <br> <strong>Description : </strong>Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 have a bug with session handling. The bug caused skipping the second factor confirmation after a successful login with the username and password when the server was configured with `remember_login_cookie_lifetime` set to `0`, once the session expired on the page to select the second factor and the page is reloaded. Nextcloud Server 29.0.15, 30.0.9, and 31.0.3 and Nextcloud Enterprise Server is upgraded to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9 and 31.0.3 contain a patch. As a workaround, set the `remember_login_cookie_lifetime` in config.php to a value other than `0`, e.g. `900`. Beware that this is only a workaround for new sessions created after the configuration change. System administration can delete affected sessions. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47790"> read more </a> </article> <hr> <article> <h3> CVE-2025-4211 - Qt Symlink Attack Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4211 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt Framework is QDir::tempPath() and anything that uses it, such as QStandardPaths with TempLocation, QTemporaryDir, and QTemporaryFile.This issue affects all version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8, from 6.6.0 through 6.8.1. It is fixed in Qt 5.15.19, Qt 6.5.9, Qt 6.8.2, 6.9.0 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4211"> read more </a> </article> <hr> <article> <h3> CVE-2025-4600 - Google Cloud Classic Application Load Balancer HTTP Request Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4600 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests. This allowed attackers to craft requests that could be misinterpreted by backend servers. The issue was fixed by disallowing stray data after a chunk, and is no longer exploitable. No action is required as Classic Application Load Balancer service after 2025-04-26 is not vulnerable. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4600"> read more </a> </article> <hr> <article> <h3> CVE-2025-4778 - "PHPGurukul Park Ticketing Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4778 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4778"> read more </a> </article> <hr> <article> <h3> CVE-2025-4780 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4780 <br> <strong>Published : </strong> May 16, 2025, 2:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4780"> read more </a> </article> <hr> <article> <h3> CVE-2024-40120 - SeaweedFS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40120 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40120"> read more </a> </article> <hr> <article> <h3> CVE-2025-2305 - Apache Linux Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2305 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, in the context of the application server, from the Linux server. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2305"> read more </a> </article> <hr> <article> <h3> CVE-2025-2306 - Acme File Server Unauthenticated Document Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-2306 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the documents UUIDv4. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2306"> read more </a> </article> <hr> <article> <h3> CVE-2025-37890 - Linux Kernel net_sched hfsc UAF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37890 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1], we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that checking for cl->qdisc->q.qlen == 0 guarantees that it hasn't inserted the class in the vttree or eltree (which is not true for the netem duplicate case). This patch checks the n_active class variable to make sure that the code won't insert the class in the vttree or eltree twice, catering for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/ <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37890"> read more </a> </article> <hr> <article> <h3> CVE-2025-40629 - PNETLab Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40629 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40629"> read more </a> </article> <hr> <article> <h3> CVE-2025-40907 - Apache FCGI Perl Integer Overflow Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40907 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40907"> read more </a> </article> <hr> <article> <h3> CVE-2025-4773 - "PHPGurukul Online Course Registration SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4773 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/level.php. The manipulation of the argument level leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4773"> read more </a> </article> <hr> <article> <h3> CVE-2025-4777 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4777 <br> <strong>Published : </strong> May 16, 2025, 1:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This affects an unknown part of the file /view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4777"> read more </a> </article> <hr> <article> <h3> CVE-2025-4771 - PHPGurukul Online Course Registration SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4771 <br> <strong>Published : </strong> May 16, 2025, 12:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4771"> read more </a> </article> <hr> <article> <h3> CVE-2025-4772 - PHPGurukul Online Course Registration SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4772 <br> <strong>Published : </strong> May 16, 2025, 12:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4772"> read more </a> </article> <hr> <article> <h3> CVE-2025-40630 - IceWarp Mail Server Open Redirection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40630 <br> <strong>Published : </strong> May 16, 2025, 11:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to redirect a user to any domain by sending a malicious URL to the victim, for example “ https://icewarp.domain.com//<MALICIOUS_DOMAIN>/%2e%2e” https://icewarp.domain.com///%2e%2e” . This vulnerability has been tested in Firefox. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40630"> read more </a> </article> <hr> <article> <h3> CVE-2025-40631 - Icewarp Mail Server Host Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40631 <br> <strong>Published : </strong> May 16, 2025, 11:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By modifying the Host header and adding a payload, arbitrary JavaScript code can be executed on page load. The user must interact with a malicious link to be redirected. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40631"> read more </a> </article> <hr> <article> <h3> CVE-2025-40632 - Icewarp Mail Server Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40632 <br> <strong>Published : </strong> May 16, 2025, 11:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40632"> read more </a> </article> <hr> <article> <h3> CVE-2025-4769 - CBEWIN Anytxt Searcher Uncontrolled Search Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4769 <br> <strong>Published : </strong> May 16, 2025, 11:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4769"> read more </a> </article> <hr> <article> <h3> CVE-2025-4770 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4770 <br> <strong>Published : </strong> May 16, 2025, 11:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4770"> read more </a> </article> <hr> <article> <h3> CVE-2025-4767 - Defog-ai Introspect Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4767 <br> <strong>Published : </strong> May 16, 2025, 10:15 a.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the argument input_model leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4767"> read more </a> </article> <hr> <article> <h3> CVE-2025-4768 - Feng Ha Ha/MegaGao SSM-ERP and Production SSM Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4768 <br> <strong>Published : </strong> May 16, 2025, 10:15 a.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4768"> read more </a> </article> <hr> <article> <h3> CVE-2025-4765 - PHPGurukul Zoo Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4765 <br> <strong>Published : </strong> May 16, 2025, 9:15 a.m. | 5 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4765"> read more </a> </article> <hr> <article> <h3> CVE-2025-4766 - PHPGurukul Zoo Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4766 <br> <strong>Published : </strong> May 16, 2025, 9:15 a.m. | 5 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4766"> read more </a> </article> <hr> <article> <h3> CVE-2025-1975 - Ollama Server Array Index Access Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1975 <br> <strong>Published : </strong> May 16, 2025, 9:15 a.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1975"> read more </a> </article> <hr> <article> <h3> CVE-2025-4679 - Synology Active Backup for Microsoft 365 Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4679 <br> <strong>Published : </strong> May 16, 2025, 9:15 a.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4679"> read more </a> </article> <hr> <article> <h3> CVE-2024-53827 - Ericsson Packet Core Controller Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-53827 <br> <strong>Published : </strong> May 16, 2025, 8:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>Ericsson Packet Core Controller (PCC) contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53827"> read more </a> </article> <hr> <article> <h3> CVE-2025-4756 - D-Link DI-7003GV2 Denial of Service Vulnerability in restart.asp </h3> <p> <strong>CVE ID : </strong>CVE-2025-4756 <br> <strong>Published : </strong> May 16, 2025, 8:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been declared as problematic. This vulnerability affects unknown code of the file /H5/restart.asp. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4756"> read more </a> </article> <hr> <article> <h3> CVE-2025-4757 - PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4757 <br> <strong>Published : </strong> May 16, 2025, 8:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4757"> read more </a> </article> <hr> <article> <h3> CVE-2025-4758 - PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4758 <br> <strong>Published : </strong> May 16, 2025, 8:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4758"> read more </a> </article> <hr> <article> <h3> CVE-2025-4761 - PHPGurukul Complaint Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4761 <br> <strong>Published : </strong> May 16, 2025, 8:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4761"> read more </a> </article> <hr> <article> <h3> CVE-2024-8201 - Hitachi Ops Center Analyzer RAID Agent Cross-Site WebSocket Hijacking </h3> <p> <strong>CVE ID : </strong>CVE-2024-8201 <br> <strong>Published : </strong> May 16, 2025, 7:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer (RAID Agent component).This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-8201"> read more </a> </article> <hr> <article> <h3> CVE-2025-1531 - Hitachi Ops Center Analyzer Viewpoint Authentication Credentials Leakage </h3> <p> <strong>CVE ID : </strong>CVE-2025-1531 <br> <strong>Published : </strong> May 16, 2025, 7:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint.This issue affects Hitachi Ops Center Analyzer viewpoint: from 10.0.0-00 before 11.0.4-00. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1531"> read more </a> </article> <hr> <article> <h3> CVE-2025-3624 - Hitachi Ops Center Analyzer Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3624 <br> <strong>Published : </strong> May 16, 2025, 7:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3624"> read more </a> </article> <hr> <article> <h3> CVE-2025-4753 - D-Link DI-7003GV2 File Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4753 <br> <strong>Published : </strong> May 16, 2025, 7:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4753"> read more </a> </article> <hr> <article> <h3> CVE-2025-4755 - D-Link DI-7003GV2 Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4755 <br> <strong>Published : </strong> May 16, 2025, 7:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been classified as critical. This affects the function sub_497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4755"> read more </a> </article> <hr> <article> <h3> CVE-2025-4751 - D-Link DI-7003GV2 Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4751 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 6 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected is an unknown function of the file /index.data. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4751"> read more </a> </article> <hr> <article> <h3> CVE-2025-4752 - D-Link DI-7003GV2 Remote Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4752 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 6 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /install_base.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4752"> read more </a> </article> <hr> <article> <h3> CVE-2025-1245 - Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer Bypass Connection Restriction Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1245 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component), Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1245"> read more </a> </article> <hr> <article> <h3> CVE-2025-3201 - WordPress Contact Form Builder Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3201 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3201"> read more </a> </article> <hr> <article> <h3> CVE-2025-3516 - WordPress Simple Lightbox Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3516 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3516"> read more </a> </article> <hr> <article> <h3> CVE-2025-4750 - D-Link Configuration Handler Remote Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4750 <br> <strong>Published : </strong> May 16, 2025, 6:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issue affects some unknown processing of the file /H5/get_version.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4750"> read more </a> </article> <hr> <article> <h3> CVE-2025-4747 - NetDragon Firewall Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4747 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Bohua NetDragon Firewall 1.0 and classified as critical. This issue affects some unknown processing of the file /systemstatus/ip_status.php. The manipulation of the argument subnet leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4747"> read more </a> </article> <hr> <article> <h3> CVE-2025-4749 - D-Link DI-7003GV2 Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4749 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This vulnerability affects the function sub_4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4749"> read more </a> </article> <hr> <article> <h3> CVE-2025-4759 - Lockfile Lint API Incorrect Behavior Order Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4759 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an attacker to install other npm packages than the intended one. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4759"> read more </a> </article> <hr> <article> <h3> CVE-2025-48174 - Avif Integer Overflow Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48174 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48174"> read more </a> </article> <hr> <article> <h3> CVE-2025-48175 - Libavif Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48175 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48175"> read more </a> </article> <hr> <article> <h3> CVE-2025-4746 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4746 <br> <strong>Published : </strong> May 16, 2025, 5:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchase_delete.php. The manipulation of the argument pr_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4746"> read more </a> </article> <hr> <article> <h3> CVE-2025-4743 - Code-projects Employee Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4743 <br> <strong>Published : </strong> May 16, 2025, 4:15 a.m. | 4 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4743"> read more </a> </article> <hr> <article> <h3> CVE-2025-4744 - Apache Employee Record System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4744 <br> <strong>Published : </strong> May 16, 2025, 4:15 a.m. | 4 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\edit_employee.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4744"> read more </a> </article> <hr> <article> <h3> CVE-2025-4745 - Apache Code-projects Employee Record System Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4745 <br> <strong>Published : </strong> May 16, 2025, 4:15 a.m. | 4 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file current_employees.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4745"> read more </a> </article> <hr> <article> <h3> CVE-2025-4741 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4741 <br> <strong>Published : </strong> May 16, 2025, 4:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/purchase_add.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4741"> read more </a> </article> <hr> <article> <h3> CVE-2025-4742 - XU-YIJIE Grpo-flat Python Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4742 <br> <strong>Published : </strong> May 16, 2025, 4:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpo_vanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4742"> read more </a> </article> <hr> <article> <h3> CVE-2025-4169 - WordPress Posts per Cat Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4169 <br> <strong>Published : </strong> May 16, 2025, 3:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>The Posts per Cat [Unmaintained plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppc' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4169"> read more </a> </article> <hr> <article> <h3> CVE-2025-4739 - Projectworlds Hospital Database Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4739 <br> <strong>Published : </strong> May 16, 2025, 3:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the file /medicines_info.php. The manipulation of the argument Med_ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4739"> read more </a> </article> <hr> <article> <h3> CVE-2025-4740 - BeamCtrl Airiana Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4740 <br> <strong>Published : </strong> May 16, 2025, 3:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4740"> read more </a> </article> <hr> <article> <h3> CVE-2025-4735 - Campcodes Sales and Inventory System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4735 <br> <strong>Published : </strong> May 16, 2025, 2:15 a.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/product.php. The manipulation of the argument Picture leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4735"> read more </a> </article> <hr> <article> <h3> CVE-2025-4736 - PHPGurukul Daily Expense Tracker SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4736 <br> <strong>Published : </strong> May 16, 2025, 2:15 a.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4736"> read more </a> </article> <hr> <article> <h3> CVE-2025-4732 - TOTOLINK A3002R/A3002RU HTTP POST Request Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4732 <br> <strong>Published : </strong> May 16, 2025, 1:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4732"> read more </a> </article> <hr> <article> <h3> CVE-2025-4733 - TOTOLINK A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4733 <br> <strong>Published : </strong> May 16, 2025, 1:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4733"> read more </a> </article> <hr> <article> <h3> CVE-2025-4734 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4734 <br> <strong>Published : </strong> May 16, 2025, 1:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/ci_update.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4734"> read more </a> </article> <hr> <article> <h3> CVE-2024-51475 - IBM Content Navigator HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-51475 <br> <strong>Published : </strong> May 16, 2025, 1:15 a.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-51475"> read more </a> </article> <hr> <article> <h3> CVE-2025-47809 - Wibu CodeMeter Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47809 <br> <strong>Published : </strong> May 16, 2025, 1:15 a.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47809"> read more </a> </article> <hr> <article> <h3> CVE-2025-47930 - Zulip Public Channel Creation Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47930 <br> <strong>Published : </strong> May 16, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique works for creating private channels without permission, though such a process requires either the API or modifying the HTML, as we do mark the "private" radio button as disabled in such cases. Version 10.3 contains a patch. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47930"> read more </a> </article> <hr> <article> <h3> CVE-2025-4729 - TOTOLINK A3002R/A3002RU Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4729 <br> <strong>Published : </strong> May 16, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4729"> read more </a> </article> <hr> <article> <h3> CVE-2025-4730 - TOTOLINK A3002R/A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4730 <br> <strong>Published : </strong> May 16, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4730"> read more </a> </article> <hr> <article> <h3> CVE-2025-4731 - TOTOLINK HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4731 <br> <strong>Published : </strong> May 16, 2025, 12:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 16 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4731"> read more </a> </article> <hr> <article> <h3> CVE-2025-0921 - Mitsubishi Electric GENESIS64/MC Works64 Symbolic Link Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0921 <br> <strong>Published : </strong> May 15, 2025, 11:15 p.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>Execution with Unnecessary Privileges vulnerability in the Pager agent of multi-agent notification feature in Mitsubishi Electric Iconics Digital Solutions GENESIS64 prior to 10.97.3, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the services of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0921"> read more </a> </article> <hr> <article> <h3> CVE-2025-4209 - "Apache HTTP Server Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4209 <br> <strong>Published : </strong> May 15, 2025, 11:15 p.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4209"> read more </a> </article> <hr> <article> <h3> CVE-2025-4726 - iSourcecode Placement Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4726 <br> <strong>Published : </strong> May 15, 2025, 11:15 p.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_student.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4726"> read more </a> </article> <hr> <article> <h3> CVE-2025-4727 - Meteor DDP-Server Regular Expression Complexity Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4727 <br> <strong>Published : </strong> May 15, 2025, 11:15 p.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedata_server.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.2 is able to address this issue. The identifier of the patch is f7ea6817b90952baaea9baace2a3b4366fee6a63. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4727"> read more </a> </article> <hr> <article> <h3> CVE-2025-4728 - SourceCodester Best Online News Portal SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4728 <br> <strong>Published : </strong> May 15, 2025, 11:15 p.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4728"> read more </a> </article> <hr> <article> <h3> CVE-2025-4725 - iSourcecode Placement Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4725 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part of the file /view_drive.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4725"> read more </a> </article> <hr> <article> <h3> CVE-2025-47275 - Auth0-PHP Session Cookie Brute Force </h3> <p> <strong>CVE ID : </strong>CVE-2025-47275 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs. Starting in version 8.0.0-BETA1 and prior to version 8.14.0, session cookies of applications using the Auth0-PHP SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Certain pre-conditions are required to be vulnerable to this issue: Applications using the Auth0-PHP SDK, or the Auth0/symfony, Auth0/laravel-auth0, and Auth0/wordpress SDKs that rely on the Auth0-PHP SDK; and session storage configured with CookieStore. Upgrade Auth0/Auth0-PHP to v8.14.0 to receive a patch. As an additional precautionary measure, rotating cookie encryption keys is recommended. Note that once updated, any previous session cookies will be rejected. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47275"> read more </a> </article> <hr> <article> <h3> CVE-2025-47287 - Tornado Multipart Form Data Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47287 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This DoS is compounded by the fact that the logging subsystem is synchronous. All versions of Tornado prior to 6.5.0 are affected. The vulnerable parser is enabled by default. Upgrade to Tornado version 6.50 to receive a patch. As a workaround, risk can be mitigated by blocking `Content-Type: multipart/form-data` in a proxy. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47287"> read more </a> </article> <hr> <article> <h3> CVE-2025-4722 - iSourcecode Placement Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4722 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /edit_profile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4722"> read more </a> </article> <hr> <article> <h3> CVE-2025-4723 - iSourcecode Placement Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4723 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /all_student.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4723"> read more </a> </article> <hr> <article> <h3> CVE-2025-4724 - iSourcecode Placement Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4724 <br> <strong>Published : </strong> May 15, 2025, 10:15 p.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is some unknown functionality of the file /student_profile.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4724"> read more </a> </article> <hr> <article> <h3> CVE-2025-4719 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4719 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/cash_transaction.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4719"> read more </a> </article> <hr> <article> <h3> CVE-2025-4720 - SourceCodester Student Result Management System Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4720 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/drop_student.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4720"> read more </a> </article> <hr> <article> <h3> CVE-2025-4721 - iSourcecode Placement Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4721 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /drive.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4721"> read more </a> </article> <hr> <article> <h3> CVE-2025-47929 - DumbDrop DOM Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47929 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload functionality prior to commit db27b25372eb9071e63583d8faed2111a2b79f1b. A user could be tricked into uploading a file with a malicious payload. Commit db27b25372eb9071e63583d8faed2111a2b79f1b fixes the vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47929"> read more </a> </article> <hr> <article> <h3> CVE-2025-4718 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4718 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customer_add.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4718"> read more </a> </article> <hr> <article> <h3> CVE-2025-1138 - IBM InfoSphere Information Server Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1138 <br> <strong>Published : </strong> May 15, 2025, 9:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1138"> read more </a> </article> <hr> <article> <h3> CVE-2025-47928 - Spotify/Github Spotipy Untrusted Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47928 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 4 hours, 34 minutes ago <br> <strong>Description : </strong>Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using `pull_request_target` on `.github/workflows/integration_tests.yml` followed by the checking out the head.sha of a forked PR can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting the vulnerability is possible to exfiltrate `GITHUB_TOKEN` and secrets `SPOTIPY_CLIENT_ID`, `SPOTIPY_CLIENT_SECRET`. In particular `GITHUB_TOKEN` which can be used to completely overtake the repo since the token has content write privileges. The `pull_request_target` in GitHub Actions is a major security concern—especially in public repositories—because it executes untrusted code from a PR, but with the context of the base repository, including access to its secrets. Commit 9dfb7177b8d7bb98a5a6014f8e6436812a47576f reverted the change that caused the issue. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47928"> read more </a> </article> <hr> <article> <h3> CVE-2025-4715 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4715 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 4 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/view_application.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4715"> read more </a> </article> <hr> <article> <h3> CVE-2025-4716 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4716 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 4 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credit_transaction_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4716"> read more </a> </article> <hr> <article> <h3> CVE-2025-4717 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4717 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 4 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /visitors-form.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4717"> read more </a> </article> <hr> <article> <h3> CVE-2025-2248 - "WordPress WP-PManager SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2248 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2248"> read more </a> </article> <hr> <article> <h3> CVE-2025-46834 - Alchemy's Modular Account Allowlist Bypass Vulnerability (Authorization Issue) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46834 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Alchemy's Modular Account is a smart contract account that is compatible with ERC-4337 and ERC-6900. In versions on the 2.x branch prior to commit 5e6f540d249afcaeaf76ab95517d0359fde883b0, owners of Modular Accounts can grant session keys (scoped external keys) to external parties and would use the allowlist module to restrict which external contracts can be accessed by the session key. There is a bug in the allowlist module in that we don't check for the `executeUserOp` -> `execute` or `executeBatch` path, effectively allowing any session key to bypass any access control restrictions set on the session key. Session keys are able to access ERC20 and ERC721 token contracts amongst others, transferring all tokens from the account out andonfigure the permissions on external modules on session keys. They would be able to remove all restrictions set on themselves this way, or rotate the keys of other keys with higher privileges into keys that they control. Commit 5e6f540d249afcaeaf76ab95517d0359fde883b0 fixes this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46834"> read more </a> </article> <hr> <article> <h3> CVE-2025-47161 - Microsoft Defender for Endpoint Elevation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47161 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Microsoft Defender for Endpoint Elevation of Privilege Vulnerability <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47161"> read more </a> </article> <hr> <article> <h3> CVE-2025-47784 - Emlog Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47784 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause `str_replace` to replace the value of `name_orig` with empty, causing deserialization to fail and return `false`. Commit 9643250802188b791419e3c2188577073256a8a2 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47784"> read more </a> </article> <hr> <article> <h3> CVE-2025-47785 - Emlog SQL Injection and Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47785 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/article_save.php is not strictly filtered. Since admin/article_save.php can be accessed by ordinary registered users, this will cause SQL injection to occur when the registered site is enabled, resulting in the injection of the admin account and password, which is then exploited by the backend remote code execution. As of time of publication, it is unknown whether a fix exists. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47785"> read more </a> </article> <hr> <article> <h3> CVE-2025-47786 - Emlog Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47786 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that allows any registered user to construct malicious JavaScript, inducing all website users to click. In `/admin/comment.php`, the parameter `perpage_num` is not validated and is directly stored in the `admin_commend_perpage_num` field of the `emlog_options` table in the database. Moreover, the output is not filtered, resulting in the direct output of malicious code. As of time of publication, it is unclear if a patch exists. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47786"> read more </a> </article> <hr> <article> <h3> CVE-2025-47787 - Emlog Pro Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47787 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Emlog is an open source website building system. Emlog Pro prior to version 2.5.10 contains a file upload vulnerability. The store.php component contains a critical security flaw where it fails to properly validate the contents of remotely downloaded ZIP plugin files. This insufficient validation allows attackers to execute arbitrary code on the vulnerable system. Version 2.5.10 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47787"> read more </a> </article> <hr> <article> <h3> CVE-2025-47788 - Atheos File Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47788 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the `$target` parameter in `/controller.php` was not properly validated, which could allow an attacker to execute arbitrary files on the server via path traversal. v602 contains a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47788"> read more </a> </article> <hr> <article> <h3> CVE-2025-47789 - Horilla Phishing Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47789 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attacker can craft a Horilla URL that refers to an external domain. Upon clicking and logging in, the user is redirected to an external domain. This allows the redirection to any arbitrary site, including phishing or malicious domains, which can be used to impersonate Horilla and trick users. Commit 1c72404df6888bb23af73c767fdaee5e6679ebd6 fixes the issue. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47789"> read more </a> </article> <hr> <article> <h3> CVE-2024-9882 - Salon Booking System Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9882 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9882"> read more </a> </article> <hr> <article> <h3> CVE-2025-0329 - WordPress AI ChatBot Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0329 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0329"> read more </a> </article> <hr> <article> <h3> CVE-2025-0687 - "WordPress Spiritual Gifts Survey Reflected Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-0687 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0687"> read more </a> </article> <hr> <article> <h3> CVE-2025-0688 - Spiritual Gifts Survey WordPress Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-0688 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0688"> read more </a> </article> <hr> <article> <h3> CVE-2025-1033 - Badgearoo WordPress Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-1033 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1033"> read more </a> </article> <hr> <article> <h3> CVE-2025-1286 - WordPress TinyMCE Button Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-1286 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Download HTML TinyMCE Button WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1286"> read more </a> </article> <hr> <article> <h3> CVE-2025-1288 - WOOEXIM WordPress CSRF Reflected XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-1288 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1288"> read more </a> </article> <hr> <article> <h3> CVE-2025-1289 - WordPress Oficial Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1289 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1289"> read more </a> </article> <hr> <article> <h3> CVE-2025-1303 - WordPress Plugin Oficial Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-1303 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1303"> read more </a> </article> <hr> <article> <h3> CVE-2025-1454 - Ninja Pages Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1454 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The Ninja Pages WordPress plugin through 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1454"> read more </a> </article> <hr> <article> <h3> CVE-2025-2203 - FunnelKit WordPress SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2203 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2203"> read more </a> </article> <hr> <article> <h3> CVE-2025-2247 - WordPress WP-PManager CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2247 <br> <strong>Published : </strong> May 15, 2025, 8:16 p.m. | 40 minutes ago <br> <strong>Description : </strong>The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 20:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2247"> read more </a> </article> <hr> <article> <h3> CVE-2025-43853 - "WAMR Symlink Following Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-43853 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is affected by a symlink following vulnerability. On WAMR running in Windows, creating a symlink pointing outside of the preopened directory and subsequently opening it with create flag will create a file on host outside of the sandbox. If the symlink points to an existing host file, it's also possible to open it and read its content. Version 2.3.0 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43853"> read more </a> </article> <hr> <article> <h3> CVE-2025-44110 - FluxBB Cross-Site Scripting (XSS) in Forum Description Field </h3> <p> <strong>CVE ID : </strong>CVE-2025-44110 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44110"> read more </a> </article> <hr> <article> <h3> CVE-2025-47279 - Undici SSL Certificate Invalid Memory Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-47279 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, then they can cause a memory leak. This has been patched in versions 5.29.0, 6.21.2, and 7.5.0. As a workaound, avoid calling a webhook repeatedly if the webhook fails. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47279"> read more </a> </article> <hr> <article> <h3> CVE-2025-47285 - Vyper Ethereum Virtual Machine Side-Effect Evaluation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47285 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, `concat()` may skip evaluation of side effects when the length of an argument is zero. This is due to a fastpath in the implementation which skips evaluation of argument expressions when their length is zero. In practice, it would be very unusual in user code to construct zero-length bytestrings using an expression with side-effects, since zero-length bytestrings are typically constructed with the empty literal `b""`; the only way to construct an empty bytestring which has side effects would be with the ternary operator introduced in v0.3.8, e.g. `b"" if self.do_some_side_effect() else b""`. The fix is available in pull request 4644 and expected to be part of the 0.4.2 release. As a workaround, don't have side effects in expressions which construct zero-length bytestrings. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47285"> read more </a> </article> <hr> <article> <h3> CVE-2025-47774 - Vyper Uninitialized Side Effect Elision in Slice Builtin </h3> <p> <strong>CVE ID : </strong>CVE-2025-47774 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, the `slice()` builtin can elide side effects when the output length is 0, and the source bytestring is a builtin (`msg.data` or `<address>.code`). The reason is that for these source locations, the check that `length >= 1` is skipped. The result is that a 0-length bytestring constructed with slice can be passed to `make_byte_array_copier`, which elides evaluation of its source argument when the max length is 0. The impact is that side effects in the `start` argument may be elided when the `length` argument is 0, e.g. `slice(msg.data, self.do_side_effect(), 0)`. The fix in pull request 4645 disallows any invocation of `slice()` with length 0, including for the ad hoc locations discussed in this advisory. The fix is expected to be part of version 0.4.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47774"> read more </a> </article> <hr> <article> <h3> CVE-2025-4709 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4709 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/transaction_del.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4709"> read more </a> </article> <hr> <article> <h3> CVE-2025-4710 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4710 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/transaction.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4710"> read more </a> </article> <hr> <article> <h3> CVE-2025-4711 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4711 <br> <strong>Published : </strong> May 15, 2025, 6:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/stockin_add.php. The manipulation of the argument prod_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4711"> read more </a> </article> <hr> <article> <h3> CVE-2025-1647 - Bootstrap Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-1647 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1647"> read more </a> </article> <hr> <article> <h3> CVE-2025-30417 - NI Circuit Design Suite Base64 Decode Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30417 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30417"> read more </a> </article> <hr> <article> <h3> CVE-2025-30418 - NI Circuit Design Suite SymbolEditor Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30418 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30418"> read more </a> </article> <hr> <article> <h3> CVE-2025-30419 - NI Circuit Design Suite SymbolEditor Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30419 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30419"> read more </a> </article> <hr> <article> <h3> CVE-2025-30420 - NI Circuit Design Suite Bitmap Out-of-Bounds Read Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30420 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30420"> read more </a> </article> <hr> <article> <h3> CVE-2025-30421 - NI Circuit Design Suite Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30421 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30421"> read more </a> </article> <hr> <article> <h3> CVE-2025-47580 - Rustaurius Front End Users Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47580 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Rustaurius Front End Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through 3.2.32. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47580"> read more </a> </article> <hr> <article> <h3> CVE-2025-4706 - Projectworlds Online Examination System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4706 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4706"> read more </a> </article> <hr> <article> <h3> CVE-2025-4707 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4707 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4707"> read more </a> </article> <hr> <article> <h3> CVE-2025-4708 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4708 <br> <strong>Published : </strong> May 15, 2025, 5:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/sales_add.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4708"> read more </a> </article> <hr> <article> <h3> CVE-2025-2570 - Mattermost System Console System Manager Access Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2570 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2570"> read more </a> </article> <hr> <article> <h3> CVE-2025-3440 - IBM Security Guardium Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3440 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3440"> read more </a> </article> <hr> <article> <h3> CVE-2025-48050 - Apache DOMPurify Directory Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-48050 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48050"> read more </a> </article> <hr> <article> <h3> CVE-2025-48051 - Lila Lichess DOM XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-48051 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48051"> read more </a> </article> <hr> <article> <h3> CVE-2025-4703 - PHPGurukul Vehicle Parking Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4703 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4703"> read more </a> </article> <hr> <article> <h3> CVE-2025-4704 - PHPGurukul Vehicle Parking Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4704 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4704"> read more </a> </article> <hr> <article> <h3> CVE-2025-4705 - PHPGurukul Vehicle Parking Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4705 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /admin/view-incomingvehicle-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4705"> read more </a> </article> <hr> <article> <h3> CVE-2024-52877 - InsydeH2O VariableRuntimeDxe Buffer Over-Read </h3> <p> <strong>CVE ID : </strong>CVE-2024-52877 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, callback function SmmCreateVariableLockList () calls CreateVariableLockListInSmm (). In CreateVariableLockListInSmm (), it uses StrSize () to get variable name size and it could lead to a buffer over-read. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52877"> read more </a> </article> <hr> <article> <h3> CVE-2024-52878 - InsydeH2O VariableRuntimeDxe Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52878 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, VariableServicesSetVariable () can be called by gRT_>SetVariable () or the SmmSetSensitiveVariable () or SmmInternalSetVariable () from SMM. In VariableServicesSetVariable (), it uses StrSize () to get variable name size, uses StrLen () to get variable name length and uses StrCmp () to compare strings. These actions may cause a buffer over-read. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52878"> read more </a> </article> <hr> <article> <h3> CVE-2024-52879 - InsydeH2O VariableRuntimeDxe Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52879 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, SmmUpdateVariablePropertySmi () is a SMM callback function and it uses StrCmp () to compare variable names. This action may cause a buffer over-read. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52879"> read more </a> </article> <hr> <article> <h3> CVE-2024-52880 - InsydeH2O VariableRuntimeDxe Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52880 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver, SecureBootHandler uses DataSize and VariableNameSize when determining if the data or name are in the buffer, but these are supplied by the caller and therefore cannot be trusted. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52880"> read more </a> </article> <hr> <article> <h3> CVE-2025-2527 - Mattermost Permission Verification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2527 <br> <strong>Published : </strong> May 15, 2025, 4:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information via an API request. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2527"> read more </a> </article> <hr> <article> <h3> CVE-2025-44185 - SourceCodester Best Employee Management System CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44185 <br> <strong>Published : </strong> May 15, 2025, 3:16 p.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44185"> read more </a> </article> <hr> <article> <h3> CVE-2025-46053 - WebERP SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46053 <br> <strong>Published : </strong> May 15, 2025, 3:16 p.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and ReplaceReportID parameters within a POST request to /reportwriter/admin/ReportCreator.php <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46053"> read more </a> </article> <hr> <article> <h3> CVE-2025-4701 - VITA-MLLM Freeze-Omni Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4701 <br> <strong>Published : </strong> May 15, 2025, 3:16 p.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local host. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4701"> read more </a> </article> <hr> <article> <h3> CVE-2025-4702 - PHPGurukul Vehicle Parking Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4702 <br> <strong>Published : </strong> May 15, 2025, 3:16 p.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/add-category.php. The manipulation of the argument catename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4702"> read more </a> </article> <hr> <article> <h3> CVE-2025-44180 - PhpGurukul Vehicle Record Management System XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44180 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44180"> read more </a> </article> <hr> <article> <h3> CVE-2025-44181 - "PhpGurukul Vehicle Record Management System Cross Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-44181 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44181"> read more </a> </article> <hr> <article> <h3> CVE-2025-44182 - "PhpGurukul Vehicle Record Management System Cross Site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-44182 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' in the /admin/edit-vehicle.php component. This allows attackers to execute arbitrary code. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44182"> read more </a> </article> <hr> <article> <h3> CVE-2025-44183 - PhpGurukul Vehicle Record Management System XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44183 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44183"> read more </a> </article> <hr> <article> <h3> CVE-2025-46052 - WebERP SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46052 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a crafted payload into the DEL form field in a POST request to /StockCounts.php <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46052"> read more </a> </article> <hr> <article> <h3> CVE-2025-4516 - CPython Bytes Decode Unicode Escape Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4516 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4516"> read more </a> </article> <hr> <article> <h3> CVE-2025-4698 - PHPGurukul Directory Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4698 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/forget-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4698"> read more </a> </article> <hr> <article> <h3> CVE-2025-4699 - PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4699 <br> <strong>Published : </strong> May 15, 2025, 2:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerability affects unknown code of the file /admin/visitors-form.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4699"> read more </a> </article> <hr> <article> <h3> CVE-2025-4697 - PHPGurukul Directory Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4697 <br> <strong>Published : </strong> May 15, 2025, 1:16 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-directory.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4697"> read more </a> </article> <hr> <article> <h3> CVE-2025-4695 - PHPGurukul Cyber Cafe Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4695 <br> <strong>Published : </strong> May 15, 2025, 1:16 p.m. | 2 hours ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Cyber Cafe Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add-users.php. The manipulation of the argument uadd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4695"> read more </a> </article> <hr> <article> <h3> CVE-2025-4696 - PHPGurukul Cyber Cafe Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4696 <br> <strong>Published : </strong> May 15, 2025, 1:16 p.m. | 2 hours ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Cyber Cafe Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 13:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4696"> read more </a> </article> <hr> <article> <h3> CVE-2025-4564 - TicketBAI Facturas para WooCommerce File Deletion Vulnerability (Arbitrary File Deletion) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4564 <br> <strong>Published : </strong> May 15, 2025, 12:15 p.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versions up to, and including, 3.18. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4564"> read more </a> </article> <hr> <article> <h3> CVE-2025-4762 - eSigna eSignaViewer IDOR </h3> <p> <strong>CVE ID : </strong>CVE-2025-4762 <br> <strong>Published : </strong> May 15, 2025, 12:15 p.m. | 3 hours, 2 minutes ago <br> <strong>Description : </strong>Insecure Direct Object Reference (IDOR) vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4762"> read more </a> </article> <hr> <article> <h3> CVE-2025-31947 - Mattermost LDAP Account Lock Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31947 <br> <strong>Published : </strong> May 15, 2025, 11:15 a.m. | 4 hours, 1 minute ago <br> <strong>Description : </strong>Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31947"> read more </a> </article> <hr> <article> <h3> CVE-2025-3446 - Mattermost Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3446 <br> <strong>Published : </strong> May 15, 2025, 11:15 a.m. | 4 hours, 1 minute ago <br> <strong>Description : </strong>Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to check the correct permissions which allows authenticated users who only have permission to invite non-guest users to a team to add guest users to that team via the API to add a single user to a team. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3446"> read more </a> </article> <hr> <article> <h3> CVE-2025-32002 - I-O DATA HDL-T Series OS Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-32002 <br> <strong>Published : </strong> May 15, 2025, 9:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitrary OS command. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32002"> read more </a> </article> <hr> <article> <h3> CVE-2025-32738 - IO DATA HDL-T Series Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-32738 <br> <strong>Published : </strong> May 15, 2025, 9:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32738"> read more </a> </article> <hr> <article> <h3> CVE-2025-4737 - Vivo Voice Assistant SSL/TLS Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-4737 <br> <strong>Published : </strong> May 15, 2025, 8:15 a.m. | 7 hours, 2 minutes ago <br> <strong>Description : </strong>Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4737"> read more </a> </article> <hr> <article> <h3> CVE-2025-27523 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager XXE Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27523 <br> <strong>Published : </strong> May 15, 2025, 7:15 a.m. | 8 hours, 1 minute ago <br> <strong>Description : </strong>XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27523"> read more </a> </article> <hr> <article> <h3> CVE-2025-27524 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager Weak Encryption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27524 <br> <strong>Published : </strong> May 15, 2025, 7:15 a.m. | 8 hours, 1 minute ago <br> <strong>Description : </strong>Weak encryption vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27524"> read more </a> </article> <hr> <article> <h3> CVE-2025-27525 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager Windows Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27525 <br> <strong>Published : </strong> May 15, 2025, 7:15 a.m. | 8 hours, 1 minute ago <br> <strong>Description : </strong>Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06. <br> <strong>Severity:</strong> 3.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27525"> read more </a> </article> <hr> <article> <h3> CVE-2024-13914 - "WordPress File Manager Advanced Shortcode Local File Inclusion Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13914 <br> <strong>Published : </strong> May 15, 2025, 6:15 a.m. | 9 hours, 1 minute ago <br> <strong>Description : </strong>The File Manager Advanced Shortcode WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortcode. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary JavaScript files on the server. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Sites currently using 2.5.4 (file-manager-advanced-shortcode) should be updated to 2.6.0 (advanced-file-manager-pro-premium). <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13914"> read more </a> </article> <hr> <article> <h3> CVE-2025-3742 - WordPress Responsive Lightbox Gallery Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3742 <br> <strong>Published : </strong> May 15, 2025, 6:15 a.m. | 9 hours, 1 minute ago <br> <strong>Description : </strong>The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3742"> read more </a> </article> <hr> <article> <h3> CVE-2025-48027 - pGina HttpAuth DNS Rebinding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-48027 <br> <strong>Published : </strong> May 15, 2025, 6:15 a.m. | 9 hours, 1 minute ago <br> <strong>Description : </strong>The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48027"> read more </a> </article> <hr> <article> <h3> CVE-2025-48024 - BlueWave Checkmate Sensitive Data Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-48024 <br> <strong>Published : </strong> May 15, 2025, 5:15 a.m. | 10 hours, 1 minute ago <br> <strong>Description : </strong>In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-48024"> read more </a> </article> <hr> <article> <h3> CVE-2025-3053 - "UiPress Lite WordPress Remote Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3053 <br> <strong>Published : </strong> May 15, 2025, 5:15 a.m. | 7 hours, 40 minutes ago <br> <strong>Description : </strong>The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 via the uip_process_form_input() function. This is due to the function taking user supplied inputs to execute arbitrary functions with arbitrary data, and does not have any sort of capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary code on the server. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3053"> read more </a> </article> <hr> <article> <h3> CVE-2025-3917 - "Baidu Station SEO Plugin Arbitrary File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3917 <br> <strong>Published : </strong> May 15, 2025, 4:16 a.m. | 8 hours, 40 minutes ago <br> <strong>Description : </strong>The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_remote_image_to_media_library function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3917"> read more </a> </article> <hr> <article> <h3> CVE-2025-4126 - WordPress EG-Series Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4126 <br> <strong>Published : </strong> May 15, 2025, 4:16 a.m. | 8 hours, 39 minutes ago <br> <strong>Description : </strong>The EG-Series plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [series] shortcode in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping on user supplied attributes in the shortcode_title function. This makes it possible for authenticated attackers - with contributor-level access and above, on sites with the Classic Editor plugin activated - to inject arbitrary JavaScript code in the titletag attribute that will execute whenever a user access an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4126"> read more </a> </article> <hr> <article> <h3> CVE-2025-4589 - WordPress Bon Toolkit Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4589 <br> <strong>Published : </strong> May 15, 2025, 4:16 a.m. | 8 hours, 39 minutes ago <br> <strong>Description : </strong>The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4589"> read more </a> </article> <hr> <article> <h3> CVE-2025-4591 - Weluka Lite Stored Cross-Site Scripting Vulnerability in WordPress </h3> <p> <strong>CVE ID : </strong>CVE-2025-4591 <br> <strong>Published : </strong> May 15, 2025, 4:16 a.m. | 8 hours, 39 minutes ago <br> <strong>Description : </strong>The Weluka Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'weluka-map' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4591"> read more </a> </article> <hr> <article> <h3> CVE-2025-4579 - WordPress Content Security Plugin Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4579 <br> <strong>Published : </strong> May 15, 2025, 2:15 a.m. | 10 hours, 40 minutes ago <br> <strong>Description : </strong>The WP Content Security Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blocked-uri and effective-directive parameters in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 15 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4579"> read more </a> </article> <hr> <article> <h3> CVE-2024-45067 - Intel Gaudi Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-45067 <br> <strong>Published : </strong> May 14, 2025, 11:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>Incorrect default permissions in some Intel(R) Gaudi(R) software installers before version 1.18 may allow an authenticated user to potentially enable escalation of privilege via local access. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45067"> read more </a> </article> <hr> <article> <h3> CVE-2025-32421 - Next.js Race Condition Page Prop Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32421 <br> <strong>Published : </strong> May 14, 2025, 11:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageProps` data instead of standard HTML. This issue was patched in versions 15.1.6 and 14.2.24 by stripping the `x-now-route-matches` header from incoming requests. Applications hosted on Vercel's platform are not affected by this issue, as the platform does not cache responses based solely on `200 OK` status without explicit `cache-control` headers. Those who self-host Next.js deployments and are unable to upgrade immediately can mitigate this vulnerability by stripping the `x-now-route-matches` header from all incoming requests at the content development network and setting `cache-control: no-store` for all responses under risk. The maintainers of Next.js strongly recommend only caching responses with explicit cache-control headers. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32421"> read more </a> </article> <hr> <article> <h3> CVE-2025-46836 - Net-tools Unvalidated Stack Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46836 <br> <strong>Published : </strong> May 14, 2025, 11:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46836"> read more </a> </article> <hr> <article> <h3> CVE-2025-47783 - Label Studio Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47783 <br> <strong>Published : </strong> May 14, 2025, 11:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attacks. The vulnerability is reproducible when sending a properly formatted request to the `POST /projects/upload-example/` endpoint. In the source code, the vulnerability is located at `label_studio/projects/views.py`. Version 1.18.0 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47783"> read more </a> </article> <hr> <article> <h3> CVE-2025-29691 - OA System XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-29691 <br> <strong>Published : </strong> May 14, 2025, 10:15 p.m. | 14 hours, 40 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userName parameter at /login/LoginsController.java. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29691"> read more </a> </article> <hr> <article> <h3> CVE-2025-29686 - OA System Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-29686 <br> <strong>Published : </strong> May 14, 2025, 10:15 p.m. | 12 hours, 40 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /inform/InformManageController.java. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29686"> read more </a> </article> <hr> <article> <h3> CVE-2025-29688 - "OA System XSS Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-29688 <br> <strong>Published : </strong> May 14, 2025, 10:15 p.m. | 12 hours, 40 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /daymanager/daymanageabilitycontroller.java. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29688"> read more </a> </article> <hr> <article> <h3> CVE-2025-29689 - OA System Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-29689 <br> <strong>Published : </strong> May 14, 2025, 10:15 p.m. | 12 hours, 40 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29689"> read more </a> </article> <hr> <article> <h3> CVE-2025-29690 - OA System Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-29690 <br> <strong>Published : </strong> May 14, 2025, 10:15 p.m. | 12 hours, 40 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.java. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29690"> read more </a> </article> <hr> <article> <h3> CVE-2025-47888 - Jenkins DingTalk Plugin SSL/TLS Certificate Validation Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47888 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 11 hours, 39 minutes ago <br> <strong>Description : </strong>Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47888"> read more </a> </article> <hr> <article> <h3> CVE-2025-47889 - Jenkins WSO2 Oauth Plugin Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47889 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 11 hours, 39 minutes ago <br> <strong>Description : </strong>In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, including usernames that do not exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47889"> read more </a> </article> <hr> <article> <h3> CVE-2025-47884 - Jenkins OpenID Connect Provider Plugin Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47884 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 9 hours, 39 minutes ago <br> <strong>Description : </strong>In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47884"> read more </a> </article> <hr> <article> <h3> CVE-2025-47885 - CloudBees Jenkins Health Advisor XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-47885 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 9 hours, 39 minutes ago <br> <strong>Description : </strong>Jenkins Health Advisor by CloudBees Plugin 374.v194b_d4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47885"> read more </a> </article> <hr> <article> <h3> CVE-2025-47886 - Jenkins Cadence vManager Plugin CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47886 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 9 hours, 39 minutes ago <br> <strong>Description : </strong>A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47886"> read more </a> </article> <hr> <article> <h3> CVE-2025-47887 - Jenkins Cadence vManager Plugin Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47887 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 9 hours, 39 minutes ago <br> <strong>Description : </strong>Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47887"> read more </a> </article> <hr> <article> <h3> CVE-2024-56427 - Samsung Exynos Modem RRC Packet Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56427 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds access via malformed RRC packets to the target. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56427"> read more </a> </article> <hr> <article> <h3> CVE-2025-26783 - Samsung Mobile Processor, Wearable Processor, and Modem Exynos RRC Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26783 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400. Incorrect handling of undefined values leads to a Denial of Service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26783"> read more </a> </article> <hr> <article> <h3> CVE-2025-27891 - Samsung Exynos Modem NAS Packet Length Check Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27891 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds reads via malformed NAS packets. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27891"> read more </a> </article> <hr> <article> <h3> CVE-2025-44024 - Pichome XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44024 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting (XSS) vulnerability was discovered in the Pichome system v2.1.0 and before. The vulnerability exists due to insufficient sanitization of user input in the login form. An attacker can inject malicious JavaScript code into the username or password fields during the login process <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44024"> read more </a> </article> <hr> <article> <h3> CVE-2025-44879 - WS-WN572HP3 CGI Upload Buffer Overflow DoS </h3> <p> <strong>CVE ID : </strong>CVE-2025-44879 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44879"> read more </a> </article> <hr> <article> <h3> CVE-2024-55569 - Samsung Exynos Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-55569 <br> <strong>Published : </strong> May 14, 2025, 9:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds writes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55569"> read more </a> </article> <hr> <article> <h3> CVE-2024-58101 - Samsung Galaxy Buds Audio Devices Bluetooth Pairing Remote Takeover Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58101 <br> <strong>Published : </strong> May 14, 2025, 8:15 p.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58101"> read more </a> </article> <hr> <article> <h3> CVE-2025-25370 - Realme GT 2 Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25370 <br> <strong>Published : </strong> May 14, 2025, 8:15 p.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25370"> read more </a> </article> <hr> <article> <h3> CVE-2025-32363 - mediDOK Deserialization Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32363 <br> <strong>Published : </strong> May 14, 2025, 8:15 p.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32363"> read more </a> </article> <hr> <article> <h3> CVE-2024-57096 - WPS Office Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57096 <br> <strong>Published : </strong> May 14, 2025, 8:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57096"> read more </a> </article> <hr> <article> <h3> CVE-2024-45516 - Zimbra Collaboration Classic UI Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45516 <br> <strong>Published : </strong> May 14, 2025, 8:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the victim's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, including malformed <img> tags with embedded JavaScript. The vulnerability is triggered when the victim views a specially crafted email in the Classic UI, causing the malicious script to execute. No further user interaction is required beyond viewing the email. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45516"> read more </a> </article> <hr> <article> <h3> CVE-2025-33104 - IBM WebSphere Application Server Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33104 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33104"> read more </a> </article> <hr> <article> <h3> CVE-2025-4640 - "PCL Zlib Out-of-bounds Write Overflow" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4640 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4640"> read more </a> </article> <hr> <article> <h3> CVE-2025-4641 - Bonigarcia WebDriverManager XML External Entity Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4641 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.0.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4641"> read more </a> </article> <hr> <article> <h3> CVE-2025-0131 - Palo Alto Networks GlobalProtect MetaDefender Endpoint Security SDK Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0131 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user also successfully exploits a race condition, which makes this vulnerability difficult to exploit. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0131"> read more </a> </article> <hr> <article> <h3> CVE-2025-0132 - Palo Alto Networks Cortex XDR Broker VM Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-0132 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0132"> read more </a> </article> <hr> <article> <h3> CVE-2025-0133 - "Palo Alto Networks PAN-OS GlobalProtect Reflected Cross-Site Scripting (XSS) Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-0133 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft—particularly if you enabled Clientless VPN. There is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal. For GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0133"> read more </a> </article> <hr> <article> <h3> CVE-2025-0134 - Palo Alto Networks Cortex XDR Broker VM Code Injection Root Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0134 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0134"> read more </a> </article> <hr> <article> <h3> CVE-2025-0135 - Palo Alto Networks GlobalProtect App Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0135 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0135"> read more </a> </article> <hr> <article> <h3> CVE-2025-0136 - Palo Alto Networks PAN-OS Unencrypted Data Transfer via AES-128-CCM IPSec Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0136 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0136"> read more </a> </article> <hr> <article> <h3> CVE-2025-0137 - Palo Alto Networks PAN-OS Authenticated Admin Impersonation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0137 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0137"> read more </a> </article> <hr> <article> <h3> CVE-2025-0138 - Palo Alto Networks Prisma Cloud Web Session Expiration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0138 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0138"> read more </a> </article> <hr> <article> <h3> CVE-2025-2900 - IBM Semeru Runtime Denial of Service Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-2900 <br> <strong>Published : </strong> May 14, 2025, 7:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2900"> read more </a> </article> <hr> <article> <h3> CVE-2025-30667 - Zoom Workplace Apps for Windows Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30667 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30667"> read more </a> </article> <hr> <article> <h3> CVE-2025-30668 - Zoom Workplace Integer Underflow Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30668 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30668"> read more </a> </article> <hr> <article> <h3> CVE-2025-46785 - Zoom Workplace Apps for Windows Buffer Over-Read Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46785 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46785"> read more </a> </article> <hr> <article> <h3> CVE-2025-46786 - Zoom Workplace Apps XML External Entity (XXE) Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46786 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46786"> read more </a> </article> <hr> <article> <h3> CVE-2025-4637 - Davisking Dlib Divide By Zero Remote Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-4637 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>Divide By Zero vulnerability in davisking dlib allows remote attackers to cause a denial of service via a crafted file. .This issue affects dlib: before <19.24.7. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4637"> read more </a> </article> <hr> <article> <h3> CVE-2025-4638 - PCL Zlib Inftrees Pointer Arithmetic Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4638 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4638"> read more </a> </article> <hr> <article> <h3> CVE-2025-4639 - Peergos XML XXE Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4639 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4639"> read more </a> </article> <hr> <article> <h3> CVE-2025-4664 - Google Chrome Cross-Origin Data Leaking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4664 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4664"> read more </a> </article> <hr> <article> <h3> CVE-2025-0130 - Palo Alto Networks PAN-OS Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-0130 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 38 minutes ago <br> <strong>Description : </strong>A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0130"> read more </a> </article> <hr> <article> <h3> CVE-2025-30663 - Zoom Workplace Apps TOCTOU Race Condition Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30663 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 38 minutes ago <br> <strong>Description : </strong>Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30663"> read more </a> </article> <hr> <article> <h3> CVE-2025-30664 - Zoom Workplace App Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30664 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 38 minutes ago <br> <strong>Description : </strong>Improper neutralization of special elements in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30664"> read more </a> </article> <hr> <article> <h3> CVE-2025-30665 - Zoom Workplace Apps for Windows NULL Pointer Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30665 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 38 minutes ago <br> <strong>Description : </strong>NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30665"> read more </a> </article> <hr> <article> <h3> CVE-2025-30666 - Zoom Workplace Apps for Windows NULL Pointer Dereference Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30666 <br> <strong>Published : </strong> May 14, 2025, 6:15 p.m. | 38 minutes ago <br> <strong>Description : </strong>NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30666"> read more </a> </article> <hr> <article> <h3> CVE-2025-44184 - SourceCodester Best Employee Management System Cross Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-44184 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44184"> read more </a> </article> <hr> <article> <h3> CVE-2025-44186 - SourceCodester Best Employee Management System CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44186 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44186"> read more </a> </article> <hr> <article> <h3> CVE-2025-47701 - Drupal Restrict Route by IP CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47701 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47701"> read more </a> </article> <hr> <article> <h3> CVE-2025-47702 - Drupal oEmbed Providers Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47702 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Providers allows Cross-Site Scripting (XSS).This issue affects oEmbed Providers: from 0.0.0 before 2.2.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47702"> read more </a> </article> <hr> <article> <h3> CVE-2025-47703 - Drupal COOKiES Consent Management Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47703 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issue affects COOKiES Consent Management: from 0.0.0 before 1.2.14. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47703"> read more </a> </article> <hr> <article> <h3> CVE-2025-47704 - Drupal Klaro Cookie Consent Management Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47704 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47704"> read more </a> </article> <hr> <article> <h3> CVE-2025-47705 - Drupal IFrame Remove Filter Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47705 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal IFrame Remove Filter allows Cross-Site Scripting (XSS).This issue affects IFrame Remove Filter: from 0.0.0 before 2.0.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47705"> read more </a> </article> <hr> <article> <h3> CVE-2025-47706 - Drupal Enterprise MFA - TFA Authentication Bypass by Capture-replay Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47706 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47706"> read more </a> </article> <hr> <article> <h3> CVE-2025-47707 - Drupal Enterprise MFA - TFA Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47707 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47707"> read more </a> </article> <hr> <article> <h3> CVE-2025-47708 - Drupal Enterprise MFA - TFA CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47708 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47708"> read more </a> </article> <hr> <article> <h3> CVE-2025-47709 - Drupal Enterprise MFA - TFA Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47709 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47709"> read more </a> </article> <hr> <article> <h3> CVE-2025-47710 - Drupal Enterprise MFA - TFA Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47710 <br> <strong>Published : </strong> May 14, 2025, 5:15 p.m. | 1 hour, 38 minutes ago <br> <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47710"> read more </a> </article> <hr> <article> <h3> CVE-2025-24969 - iTop Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-24969 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24969"> read more </a> </article> <hr> <article> <h3> CVE-2025-47775 - GitHub Bullfrog DNS Exfiltration Vulnerability (Sandbox Bypass) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47775 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47775"> read more </a> </article> <hr> <article> <h3> CVE-2025-47777 - 5ire Stored XSS and RCE Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47777 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remote Code Execution (RCE) via unsafe Electron protocol handling and exposed Electron APIs. All users of 5ire client versions prior to patched releases, particularly those interacting with untrusted chatbots or pasting external content, are affected. Version 0.11.1 contains a patch for the issue. <br> <strong>Severity:</strong> 9.6 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47777"> read more </a> </article> <hr> <article> <h3> CVE-2025-47778 - Sulu SVG XML External Entity Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47778 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>Sulu is an open-source PHP content management system based on the Symfony framework. Starting in versions 2.5.21, 2.6.5, and 3.0.0-alpha1, an admin user can upload SVG which may load external data via XML DOM library. This can be used for insecure XML External Entity References. The problem has been patched in versions 2.6.9, 2.5.25, and 3.0.0-alpha3. As a workaround, one may patch the effect file `src/Sulu/Bundle/MediaBundle/FileInspector/SvgFileInspector.php` manually. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47778"> read more </a> </article> <hr> <article> <h3> CVE-2025-47781 - Rallly Token Brute Force Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47781 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>Rallly is an open-source scheduling and collaboration tool. Versions up to and including 3.22.1 of the application features token based authentication. When a user attempts to login to the application, they insert their email and a 6 digit code is sent to their email address to complete the authentication. A token that consists of 6 digits only presents weak entropy however and when coupled with no token brute force protection, makes it possible for an unauthenticated attacker with knowledge of a valid email address to successfully brute force the token within 15 minutes (token expiration time) and take over the account associated with the targeted email address. All users on the Rallly applications are impacted. As long as an attacker knows the user's email address they used to register on the app, they can systematically take over any user account. For the authentication mechanism to be safe, the token would need to be assigned a complex high entropy value that cannot be bruteforced within reasonable time, and ideally rate limiting the /api/auth/callback/email endpoint to further make brute force attempts unreasonable within the 15 minutes time. As of time of publication, no patched versions are available. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47781"> read more </a> </article> <hr> <article> <h3> CVE-2025-47782 - MotionEye Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47782 <br> <strong>Published : </strong> May 14, 2025, 4:15 p.m. | 51 minutes ago <br> <strong>Description : </strong>motionEye is an online interface for the software motion, a video surveillance program with motion detection. In versions 0.43.1b1 through 0.43.1b3, using a constructed (camera) device path with the `add`/`add_camera` motionEye web API allows an attacker with motionEye admin user credentials to execute any command within a non-interactive shell as motionEye run user, `motion` by default. The vulnerability has been patched with motionEye v0.43.1b4. As a workaround, apply the patch manually. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47782"> read more </a> </article> <hr> <article> <h3> CVE-2024-10864 - OpenText Advance Authentication SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-10864 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advance Authentication. This issue affects Advance Authentication versions before 6.5 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-10864"> read more </a> </article> <hr> <article> <h3> CVE-2024-10865 - OpenText Advance Authentication Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-10865 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advance Authentication. This issue affects Advance Authentication version before 6.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-10865"> read more </a> </article> <hr> <article> <h3> CVE-2024-52601 - iTop Unauthenticated Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52601 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can have read access to objects they're not allowed to see by querying an unprotected route. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52601"> read more </a> </article> <hr> <article> <h3> CVE-2024-56157 - iTop Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56157 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Prior to versions 3.1.3 and 3.2.1, by filling malicious code in a CSV content, a cross-site scripting attack can be performed when importing this content. The issue is fixed in versions 3.1.3 and 3.2.1. As a workaround, check CSV content before importing it. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56157"> read more </a> </article> <hr> <article> <h3> CVE-2025-24021 - iTop Unauthenticated Object Field Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24021 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can set value to object fields when they're not supposed to. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24021"> read more </a> </article> <hr> <article> <h3> CVE-2025-24022 - iTop Server Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24022 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, server code execution is possible through the frontend of iTop's portal. This is fixed in versions 2.7.12, 3.1.3 and 3.2.1. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24022"> read more </a> </article> <hr> <article> <h3> CVE-2025-24026 - iTop Regular Expression Denial of Service (ReDoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24026 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. Versions prior to 3.2.1 are vulnerable to regular expression denial of service (ReDoS) that may, under some circumstances, affect iTop server. Version 3.2.1 doesn't use the affected variable in the regular expression. As a workaround, if iTop app_root_url is defined in the configuration file, then there is no possible way to exploit this ReDoS. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24026"> read more </a> </article> <hr> <article> <h3> CVE-2025-24785 - iTop PHP Error Remote Crash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24785 <br> <strong>Published : </strong> May 14, 2025, 3:15 p.m. | 1 hour, 51 minutes ago <br> <strong>Description : </strong>iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layout_class before saving the dashboard. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24785"> read more </a> </article> <hr> <article> <h3> CVE-2024-54779 - Netgate pfSense CE Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-54779 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54779"> read more </a> </article> <hr> <article> <h3> CVE-2024-54780 - Netgate pfSense CE OpenVPN Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-54780 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. An authenticated attacker can exploit this vulnerability by injecting arbitrary OpenVPN management commands via the remipp parameter. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-54780"> read more </a> </article> <hr> <article> <h3> CVE-2024-57273 - Netgate pfSense CE Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57273 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized "reason" field and a derivable device key generated from the public SSH key. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57273"> read more </a> </article> <hr> <article> <h3> CVE-2025-22756 - CVE-2022-47947: Apache HTTP Server Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-22756 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22756"> read more </a> </article> <hr> <article> <h3> CVE-2025-3600 - Telerik UI for AJAX Unhandled Exception Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3600 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3600"> read more </a> </article> <hr> <article> <h3> CVE-2025-47436 - Apache ORC Heap-based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47436 <br> <strong>Published : </strong> May 14, 2025, 2:15 p.m. | 2 hours, 51 minutes ago <br> <strong>Description : </strong>Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted malformed ORC files can cause the decompressor to allocate a 250-byte buffer but then attempts to copy 295 bytes into it. It causes memory corruption. This issue affects Apache ORC C++ library: through 1.8.8, from 1.9.0 through 1.9.5, from 2.0.0 through 2.0.4, from 2.1.0 through 2.1.1. Users are recommended to upgrade to version 1.8.9, 1.9.6, 2.0.5, and 2.1.2, which fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47436"> read more </a> </article> <hr> <article> <h3> CVE-2023-53146 - "Linux Media DW2102 Null Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53146 <br> <strong>Published : </strong> May 14, 2025, 1:15 p.m. | 3 hours, 51 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach dw2102_i2c_transfer. If accessing msg[i].buf[0] without sanity check, null ptr deref would happen. We add check on msg[i].len to prevent crash. Similar commit: commit 950e252cb469 ("[media] dw2102: limit messages to buffer size") <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53146"> read more </a> </article> <hr> <article> <h3> CVE-2025-3769 - LatePoint WordPress Calendar Booking Plugin Insecure Direct Object Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3769 <br> <strong>Published : </strong> May 14, 2025, 12:15 p.m. | 4 hours, 51 minutes ago <br> <strong>Description : </strong>The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.92 via the 'view_booking_summary_in_lightbox' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to retrieve appointment details such as customer names and email addresses. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3769"> read more </a> </article> <hr> <article> <h3> CVE-2025-3931 - Yggdrasil DBus Unauthenticated Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3931 <br> <strong>Published : </strong> May 14, 2025, 12:15 p.m. | 4 hours, 51 minutes ago <br> <strong>Description : </strong>A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component. Yggdrasil creates a DBus method to dispatch messages to workers. However, it misses authentication and authorization checks, allowing every system user to call it. One available Yggdrasil worker acts as a package manager with capabilities to create and enable new repositories and install or remove packages. This flaw allows an attacker with access to the system to leverage the lack of authentication on the dispatch message to force the Yggdrasil worker to install arbitrary RPM packages. This issue results in local privilege escalation, enabling the attacker to access and modify sensitive system data. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3931"> read more </a> </article> <hr> <article> <h3> CVE-2025-47445 - Eventin Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47445 <br> <strong>Published : </strong> May 14, 2025, 12:15 p.m. | 4 hours, 51 minutes ago <br> <strong>Description : </strong>Relative Path Traversal vulnerability in Themewinter Eventin allows Path Traversal.This issue affects Eventin: from n/a through 4.0.26. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47445"> read more </a> </article> <hr> <article> <h3> CVE-2025-4430 - EZD RP File Manipulation Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-4430 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 5 hours, 50 minutes ago <br> <strong>Description : </strong>Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4430"> read more </a> </article> <hr> <article> <h3> CVE-2025-26795 - Apache IoTDB JDBC Driver Information Exposure and Log Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26795 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26795"> read more </a> </article> <hr> <article> <h3> CVE-2025-26864 - Apache IoTDB OpenIdAuthorizer Sensitive Information Exposure and Tampering </h3> <p> <strong>CVE ID : </strong>CVE-2025-26864 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26864"> read more </a> </article> <hr> <article> <h3> CVE-2025-3833 - Zohocorp ManageEngine ADSelfService Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3833 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3833"> read more </a> </article> <hr> <article> <h3> CVE-2025-3834 - Zohocorp ManageEngine ADAudit Plus SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3834 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3834"> read more </a> </article> <hr> <article> <h3> CVE-2025-47292 - Cap Collectif Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47292 <br> <strong>Published : </strong> May 14, 2025, 11:16 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175bdaf2be0b8102dd198, the `DebateAlternateArgumentsResolver` deserializes a `Cursor`, allowing any classes and which can be controlled by unauthenticated user. Exploitation of this vulnerability can lead to Remote Code Execution. The vulnerability is fixed in commit 812f2a7d271b76deab1175bdaf2be0b8102dd198. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47292"> read more </a> </article> <hr> <article> <h3> CVE-2024-24780 - Apache IoTDB Untrusted URI Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-24780 <br> <strong>Published : </strong> May 14, 2025, 11:15 a.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Apache IoTDB: from 1.0.0 before 1.3.4. Users are recommended to upgrade to version 1.3.4, which fixes the issue. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-24780"> read more </a> </article> <hr> <article> <h3> CVE-2024-13940 - Ninja Forms Webhooks SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13940 <br> <strong>Published : </strong> May 14, 2025, 9:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13940"> read more </a> </article> <hr> <article> <h3> CVE-2024-8988 - PeepSo Core: File Uploads Plugin WordPress Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2024-8988 <br> <strong>Published : </strong> May 14, 2025, 9:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>The PeepSo Core: File Uploads plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.6.0 via the file_download REST API endpoint due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to download files uploaded by others users and expose potentially sensitive information. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-8988"> read more </a> </article> <hr> <article> <h3> CVE-2025-2875 - Apache Controller Resource Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2875 <br> <strong>Published : </strong> May 14, 2025, 9:15 a.m. | 5 hours, 42 minutes ago <br> <strong>Description : </strong>CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2875"> read more </a> </article> <hr> <article> <h3> CVE-2024-52290 - LF Edge eKuiper Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-52290 <br> <strong>Published : </strong> May 14, 2025, 8:15 a.m. | 6 hours, 42 minutes ago <br> <strong>Description : </strong>LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configuration key `Name` (`confKey`) parameter. After this setup, when any user with access to this service (e.g. admin) tries to delete this key, a payload acts in the victim's browser. Version 2.1.0 fixes the issue. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52290"> read more </a> </article> <hr> <article> <h3> CVE-2025-0020 - ArcGIS OAuth 2.0 API Authentication Privilege Abuse Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0020 <br> <strong>Published : </strong> May 14, 2025, 8:15 a.m. | 6 hours, 42 minutes ago <br> <strong>Description : </strong>Violation of Secure Design Principles, Hidden Functionality, Incorrect Provision of Specified Functionality vulnerability in ArcGIS (Authentication) allows Privilege Abuse, Manipulating Hidden Fields, Configuration/Environment Manipulation. The ArcGIS client_credentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden (known and by-design, but undocumented) functionality enables a requestor (Referred to as client in RFC 6749) to request an, undocumented, custom token expiration from ArcGIS (Referred to as authorization server in RFC 6749). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0020"> read more </a> </article> <hr> <article> <h3> Retour sur la participation de l’ANSSI à l’édition 2025 de Locked Shields </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Retour sur la participation de l’ANSSI à l’édition 2025 de Locked Shields</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/locked_shield_2025_actualite.png?h=f97871b5&itok=PUX4HcLp"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/locked_shield_2025_actualite.png?h=f97871b5&itok=AtpXSILL"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/locked_shield_2025_actualite.png?h=f97871b5&itok=hqLRgPb7"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/locked_shield_2025_actualite.png?h=f97871b5&itok=Hqc6gOWn"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/locked_shield_2025_actualite.png?h=f97871b5&itok=PUX4HcLp" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-05-14T08:02:15+00:00" title="Mercredi 14 Mai 2025 - 08:02" class="datetime">mer 14/05/2025 - 08:02</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Après deux semaines d’exercice, la France et la Pologne terminent à la seconde place de Locked Shield 2025 organisé par le CCDCOE entre le 28 avril et le 9 mai.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3><strong>Mettre à l’épreuve les compétences des cybercombattants français</strong></h3> <p>Le Centre d’excellence de cyberdéfense coopérative de l’OTAN (CCDCOE) a organisé la nouvelle édition de Locked Shields. <a>Plus</a> grand exercice de cyberdéfense international, il s’est déroulé en Estonie, <a>28 avril au 9 mai 2025</a>. Cet événement a rassemblé 4 000 spécialistes en lutte offensive et cyberdéfense provenant de diverses organisations issues de 41 nations. La France s’est investie pleinement dans cet exercice avec la participation cette année encore des experts de l’ANSSI.</p> <p>Locked Shields a mis à l’épreuve les compétences des participants et testé leurs capacités à répondre à un incident cyber de grande ampleur dans un environnement contrôlé et réaliste. Cet évènement est également une compétition entre les pays engagés qui permet aux experts en cybersécurité de se perfectionner dans la défense des systèmes d’information nationaux et des infrastructures critiques.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3><strong>L’équipe franco-polonaise, une collaboration concluante pour renforcer les compétences et la coopération</strong></h3> <p>Après deux semaines d’exercice, l’équipe franco-polonaise, composée notamment des cybercombattants français du COMCYBER (ministère des Armées) et des personnels de l’ANSSI, s’est hissée à la deuxième place du podium. Des étudiants de quatre écoles partenaires (à savoir l'EPITA, l'ENSIBS, l'École 2600 et l'ESGI) ont également joint leur force.</p> <p>Déjà partenaire en 2022 à Paris les équipes de l’ANSSI, du COMCYBER ainsi que du Commandement Cyber polonais ont continué de tisser des liens étroits et de renforcer la coopération sur les volets stratégiques, tactiques et technico-opératifs, communicationnels et juridiques. Tant au niveau européen qu’international, Locked Shields 2025 a permis de renforcer la capacité de la France à travailler avec ses alliés.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--default"> <figure role="figure" aria-label="L'équipe française pendant Locked Shields au Kremlin Bicêtre (Paris) © COMCYBER"><a data-lightbox="public://image/locked_shield_2025_actualite_corps.png" data-title=" L'équipe française pendant Locked Shields au Kremlin Bicêtre (Paris) © COMCYBER" data-alt="" href="https://cyber.gouv.fr/sites/default/files/image/locked_shield_2025_actualite_corps.png" class="lightbox-img"> <img src="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/locked_shield_2025_actualite_corps.png?itok=JlSBh-2L" alt="" /></a> <figcaption>L'équipe française pendant Locked Shields au Kremlin Bicêtre (Paris) © COMCYBER</figcaption></figure></div> </div> </div> </p> <p class="feed-time"> Wed, 14 May 2025 08:02:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/retour-sur-la-participation-de-lanssi-ledition-2025-de-locked-shields"> read more </a> </article> <hr> <article> <h3> CVE-2025-47897 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47897 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 41 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47897"> read more </a> </article> <hr> <article> <h3> CVE-2025-47898 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47898 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 41 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47898"> read more </a> </article> <hr> <article> <h3> CVE-2025-47899 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47899 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 41 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47899"> read more </a> </article> <hr> <article> <h3> CVE-2025-47891 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47891 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47891"> read more </a> </article> <hr> <article> <h3> CVE-2025-47892 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-47892 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47892"> read more </a> </article> <hr> <article> <h3> CVE-2025-47893 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-47893 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47893"> read more </a> </article> <hr> <article> <h3> CVE-2025-47894 - Apache HTTP Server CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47894 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47894"> read more </a> </article> <hr> <article> <h3> CVE-2025-47895 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47895 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47895"> read more </a> </article> <hr> <article> <h3> CVE-2025-47896 - VMware Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47896 <br> <strong>Published : </strong> May 14, 2025, 4:16 a.m. | 10 hours, 10 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47896"> read more </a> </article> <hr> <article> <h3> CVE-2025-4520 - Uncanny Automator WordPress Unauthorized Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4520 <br> <strong>Published : </strong> May 14, 2025, 3:15 a.m. | 9 hours, 51 minutes ago <br> <strong>Description : </strong>The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4520"> read more </a> </article> <hr> <article> <h3> CVE-2025-3623 - WordPress Uncanny Automator PHP Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3623 <br> <strong>Published : </strong> May 14, 2025, 3:15 a.m. | 9 hours, 10 minutes ago <br> <strong>Description : </strong>The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 14 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3623"> read more </a> </article> <hr> <article> <h3> CVE-2025-47905 - Varnish Cache HTTP/1 Chunk Boundary CRLF Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47905 <br> <strong>Published : </strong> May 13, 2025, 10:15 p.m. | 14 hours, 10 minutes ago <br> <strong>Description : </strong>Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47905"> read more </a> </article> <hr> <article> <h3> CVE-2025-4574 - Crossbeam-channel Rust Crate Double-Free Error </h3> <p> <strong>CVE ID : </strong>CVE-2025-4574 <br> <strong>Published : </strong> May 13, 2025, 10:15 p.m. | 14 hours, 10 minutes ago <br> <strong>Description : </strong>In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4574"> read more </a> </article> <hr> <article> <h3> CVE-2025-26646 - Microsoft .NET Path Traversal Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-26646 <br> <strong>Published : </strong> May 13, 2025, 10:15 p.m. | 12 hours, 38 minutes ago <br> <strong>Description : </strong>External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26646"> read more </a> </article> <hr> <article> <h3> CVE-2025-43568 - Substance3D Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43568 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43568"> read more </a> </article> <hr> <article> <h3> CVE-2025-43569 - Substance3D Stager Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43569 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43569"> read more </a> </article> <hr> <article> <h3> CVE-2025-43570 - Substance3D Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43570 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43570"> read more </a> </article> <hr> <article> <h3> CVE-2025-43571 - Substance3D Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43571 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43571"> read more </a> </article> <hr> <article> <h3> CVE-2025-43572 - Dimension File Handler Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-43572 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43572"> read more </a> </article> <hr> <article> <h3> CVE-2025-4668 - Apache HTTP Server Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4668 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 13 hours, 37 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4668"> read more </a> </article> <hr> <article> <h3> CVE-2025-43565 - ColdFusion Incorrect Authorization Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-43565 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 11 hours, 37 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43565"> read more </a> </article> <hr> <article> <h3> CVE-2025-43566 - ColdFusion versions 2025.1, 2023.13, 2021.19 and e </h3> <p> <strong>CVE ID : </strong>CVE-2025-43566 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 11 hours, 37 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access. Exploitation of this issue does not require user interaction and scope is changed. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43566"> read more </a> </article> <hr> <article> <h3> CVE-2025-43567 - Adobe Connect Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43567 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 11 hours, 37 minutes ago <br> <strong>Description : </strong>Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43567"> read more </a> </article> <hr> <article> <h3> CVE-2025-43563 - Adobe ColdFusion File System Read Improper Access Control </h3> <p> <strong>CVE ID : </strong>CVE-2025-43563 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43563"> read more </a> </article> <hr> <article> <h3> CVE-2025-43564 - Adobe ColdFusion File System Read Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-43564 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 11 hours, 7 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43564"> read more </a> </article> <hr> <article> <h3> CVE-2025-43548 - Dimension Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43548 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43548"> read more </a> </article> <hr> <article> <h3> CVE-2025-43549 - Substance3D Use After Free Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43549 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43549"> read more </a> </article> <hr> <article> <h3> CVE-2025-43551 - Substance3D Stager Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43551 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43551"> read more </a> </article> <hr> <article> <h3> CVE-2025-43553 - Substance3D Modeler Uncontrolled Search Path Element Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43553 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43553"> read more </a> </article> <hr> <article> <h3> CVE-2025-43554 - Substance3D Modeler - Out-of-Bounds Write Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43554 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43554"> read more </a> </article> <hr> <article> <h3> CVE-2025-43559 - ColdFusion Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43559 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43559"> read more </a> </article> <hr> <article> <h3> CVE-2025-43560 - ColdFusion Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43560 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43560"> read more </a> </article> <hr> <article> <h3> CVE-2025-43561 - ColdFusion Incorrect Authorization Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43561 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass authentication mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43561"> read more </a> </article> <hr> <article> <h3> CVE-2025-43562 - ColdFusion OS Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-43562 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 7 hours, 6 minutes ago <br> <strong>Description : </strong>ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43562"> read more </a> </article> <hr> <article> <h3> CVE-2025-30315 - Adobe Connect Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30315 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30315"> read more </a> </article> <hr> <article> <h3> CVE-2025-30316 - Adobe Connect Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30316 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 5 hours, 36 minutes ago <br> <strong>Description : </strong>Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30316"> read more </a> </article> <hr> <article> <h3> CVE-2025-24308 - Intel Server D50DNP/M50FCP UEFI Firmware Escalation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24308 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24308"> read more </a> </article> <hr> <article> <h3> CVE-2025-24495 - Intel Core Ultra Processors Branch Prediction Unit Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24495 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>Incorrect initialization of resource in the branch prediction unit for some Intel(R) Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24495"> read more </a> </article> <hr> <article> <h3> CVE-2025-30314 - Adobe Connect Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-30314 <br> <strong>Published : </strong> May 13, 2025, 9:16 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30314"> read more </a> </article> <hr> <article> <h3> CVE-2025-45863 - TOTOLINK A3002R Buffer Overflow in formMapDelDevice </h3> <p> <strong>CVE ID : </strong>CVE-2025-45863 <br> <strong>Published : </strong> May 13, 2025, 8:15 p.m. | 36 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45863"> read more </a> </article> <hr> <article> <h3> CVE-2025-3744 - Nomad Sentinel Policy Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3744 <br> <strong>Published : </strong> May 13, 2025, 7:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3744"> read more </a> </article> <hr> <article> <h3> CVE-2025-45746 - ZKT ZKBio CVSecurity Hardcoded JWT Secret Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-45746 <br> <strong>Published : </strong> May 13, 2025, 7:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45746"> read more </a> </article> <hr> <article> <h3> CVE-2025-45861 - TOTOLINK A3002R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45861 <br> <strong>Published : </strong> May 13, 2025, 7:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45861"> read more </a> </article> <hr> <article> <h3> CVE-2025-45865 - TOTOLINK A3002R DNS Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45865 <br> <strong>Published : </strong> May 13, 2025, 7:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45865"> read more </a> </article> <hr> <article> <h3> CVE-2023-31358 - AMD Manageability API DLL Hijacking Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-31358 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-31358"> read more </a> </article> <hr> <article> <h3> CVE-2023-31359 - AMD Manageability API Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-31359 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-31359"> read more </a> </article> <hr> <article> <h3> CVE-2025-27197 - Adobe Lightroom Out-of-Bounds Write Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27197 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27197"> read more </a> </article> <hr> <article> <h3> CVE-2025-30322 - Substance3D Painter Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30322 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30322"> read more </a> </article> <hr> <article> <h3> CVE-2025-30324 - Adobe Photoshop Integer Underflow Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30324 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30324"> read more </a> </article> <hr> <article> <h3> CVE-2025-30325 - Adobe Photoshop Integer Overflow Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-30325 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30325"> read more </a> </article> <hr> <article> <h3> CVE-2025-30326 - Adobe Photoshop Uninitialized Pointer Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30326 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30326"> read more </a> </article> <hr> <article> <h3> CVE-2025-30328 - Animate Out-of-Bounds Write Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30328 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30328"> read more </a> </article> <hr> <article> <h3> CVE-2025-30329 - Adobe Animate NULL Pointer Dereference Denial-of-Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30329 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30329"> read more </a> </article> <hr> <article> <h3> CVE-2025-30330 - Adobe Illustrator Heap-based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30330 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30330"> read more </a> </article> <hr> <article> <h3> CVE-2025-43545 - Adobe Bridge Uninitialized Pointer Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43545 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43545"> read more </a> </article> <hr> <article> <h3> CVE-2025-43546 - Oracle Bridge Integer Underflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43546 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43546"> read more </a> </article> <hr> <article> <h3> CVE-2025-43547 - Bridge File Integer Overflow Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-43547 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43547"> read more </a> </article> <hr> <article> <h3> CVE-2025-43555 - Animate Integer Underflow Allows Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-43555 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43555"> read more </a> </article> <hr> <article> <h3> CVE-2025-43556 - Animate Integer Overflow or Wraparound Vulnerability (Arbitrary Code Execution) </h3> <p> <strong>CVE ID : </strong>CVE-2025-43556 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43556"> read more </a> </article> <hr> <article> <h3> CVE-2025-43557 - Animate Access of Uninitialized Pointer Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43557 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43557"> read more </a> </article> <hr> <article> <h3> CVE-2025-4660 - "SecureConnector Windows Agent Named Pipe Remote Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4660 <br> <strong>Published : </strong> May 13, 2025, 6:15 p.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent. This does not impact Linux or OSX Secure Connector. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4660"> read more </a> </article> <hr> <article> <h3> CVE-2025-3757 - OpenPubkey Invalid JWS Signature Verification </h3> <p> <strong>CVE ID : </strong>CVE-2025-3757 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3757"> read more </a> </article> <hr> <article> <h3> CVE-2025-47280 - Umbraco Forms Email Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47280 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email message, making any form with this workflow configured vulnerable, as it allows sending the message from a trusted system and address, potentially bypassing spam and email client security systems. This issue affects all (supported) versions Umbraco Forms and is patched in 13.4.2 and 15.1.2. Unpatched or unsupported versions can workaround this issue by using the `Send email with template (Razor)` workflow instead or writing a custom workflow type. To avoid accidentally using the vulnerable workflow again, the `SendEmail` workflow type can be removed using a composer available in the GitHub Security Advisory for this vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47280"> read more </a> </article> <hr> <article> <h3> CVE-2025-4658 - OpenPubkey/OPKSSH JWS Signature Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4658 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4658"> read more </a> </article> <hr> <article> <h3> CVE-2025-32709 - "Windows Ancillary Function Driver for WinSock Use-After-Free Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-32709 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32709"> read more </a> </article> <hr> <article> <h3> CVE-2025-32704 - Microsoft Office Excel Buffer Over-read Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32704 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 41 minutes ago <br> <strong>Description : </strong>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32704"> read more </a> </article> <hr> <article> <h3> CVE-2025-32705 - Microsoft Office Outlook Out-of-bounds Read Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32705 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 41 minutes ago <br> <strong>Description : </strong>Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32705"> read more </a> </article> <hr> <article> <h3> CVE-2025-32706 - Windows Common Log File System Driver Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32706 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 41 minutes ago <br> <strong>Description : </strong>Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32706"> read more </a> </article> <hr> <article> <h3> CVE-2025-32707 - Windows NTFS Out-of-bounds Read Privilege Elevation </h3> <p> <strong>CVE ID : </strong>CVE-2025-32707 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 41 minutes ago <br> <strong>Description : </strong>Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32707"> read more </a> </article> <hr> <article> <h3> CVE-2025-30378 - Microsoft Office SharePoint Deserialization Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30378 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30378"> read more </a> </article> <hr> <article> <h3> CVE-2025-30379 - Microsoft Office Excel Invalid Pointer Reference Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-30379 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30379"> read more </a> </article> <hr> <article> <h3> CVE-2025-30381 - Microsoft Office Excel Out-of-Bounds Read Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-30381 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30381"> read more </a> </article> <hr> <article> <h3> CVE-2025-30382 - Microsoft Office SharePoint RCE Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30382 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30382"> read more </a> </article> <hr> <article> <h3> CVE-2025-30383 - Microsoft Office Excel Type Confusion Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30383 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30383"> read more </a> </article> <hr> <article> <h3> CVE-2025-30384 - Microsoft Office SharePoint Deserialization Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30384 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30384"> read more </a> </article> <hr> <article> <h3> CVE-2025-30385 - Windows Common Log File System Driver Use-After-Free Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-30385 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30385"> read more </a> </article> <hr> <article> <h3> CVE-2025-30386 - Microsoft Office Use After Free Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30386 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30386"> read more </a> </article> <hr> <article> <h3> CVE-2025-30387 - Azure Web Application Privilege Escalation Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30387 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30387"> read more </a> </article> <hr> <article> <h3> CVE-2025-30388 - Windows Win32K GRFX Heap-based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-30388 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30388"> read more </a> </article> <hr> <article> <h3> CVE-2025-30393 - Microsoft Office Excel Use-After-Free Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30393 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30393"> read more </a> </article> <hr> <article> <h3> CVE-2025-30394 - Citrix Remote Desktop Gateway Service Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30394 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30394"> read more </a> </article> <hr> <article> <h3> CVE-2025-30397 - Microsoft Scripting Engine Type Confusion Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30397 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30397"> read more </a> </article> <hr> <article> <h3> CVE-2025-30400 - Microsoft Windows DWM Use-After-Free Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30400 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30400"> read more </a> </article> <hr> <article> <h3> CVE-2025-32701 - Windows Common Log File System Driver Use-After-Free Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-32701 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32701"> read more </a> </article> <hr> <article> <h3> CVE-2025-32702 - Visual Studio Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32702 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32702"> read more </a> </article> <hr> <article> <h3> CVE-2025-32703 - Visual Studio Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32703 <br> <strong>Published : </strong> May 13, 2025, 5:16 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32703"> read more </a> </article> <hr> <article> <h3> CVE-2024-46506 - NetAlertX Unauthenticated Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-46506 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-46506"> read more </a> </article> <hr> <article> <h3> CVE-2024-48766 - NetAlertX HTTP File Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-48766 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48766"> read more </a> </article> <hr> <article> <h3> CVE-2024-56526 - OXID eShop Smarty Template Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56526 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56526"> read more </a> </article> <hr> <article> <h3> CVE-2025-22462 - Ivanti Neurons for ITSM Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22462 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gain administrative access to the system. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22462"> read more </a> </article> <hr> <article> <h3> CVE-2025-28055 - GalWeb Arbitrary File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28055 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28055"> read more </a> </article> <hr> <article> <h3> CVE-2025-28056 - Apache Rebuild SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28056 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28056"> read more </a> </article> <hr> <article> <h3> CVE-2025-30207 - "Kirby PHP Built-in Server Path Traversal Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-30207 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software (such as Apache, nginx or Caddy) are not affected. A missing path traversal check allowed attackers to navigate all files on the server that were accessible to the PHP process, including files outside of the Kirby installation. The vulnerable implementation delegated all existing files to PHP, including existing files outside of the document root. This leads to a different response that allows attackers to determine whether the requested file exists. Because Kirby's router only delegates such requests to PHP and does not load or execute them, contents of the files were not exposed as PHP treats requests to files outside of the document root as invalid. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, the maintainers of Kirby have updated the router to check if existing static files are within the document root. Requests to files outside the document root are treated as page requests of the error page and will no longer allow to determine whether the file exists or not. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30207"> read more </a> </article> <hr> <article> <h3> CVE-2025-31493 - Kirby Path Traversal and Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31493 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `collection()` helper or `$kirby->collection()` method with a dynamic collection name (such as a collection name that depends on request or user data). Sites that only use fixed calls to the `collection()` helper/`$kirby->collection()` method (i.e. calls with a simple string for the collection name) are *not* affected. A missing path traversal check allowed attackers to navigate and access all files on the server that were accessible to the PHP process, including files outside of the collections root or even outside of the Kirby installation. PHP code within such files was executed. Such attacks first require an attack vector in the site code that is caused by dynamic collection names, such as `collection('tags-' . get('tags'))`. It generally also requires knowledge of the site structure and the server's file system by the attacker, although it can be possible to find vulnerable setups through automated methods such as fuzzing. In a vulnerable setup, this could cause damage to the confidentiality and integrity of the server. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, the maintainers of Kirby have added a check for the collection path that ensures that the resulting path is contained within the configured collections root. Collection paths that point outside of the collections root will not be loaded. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31493"> read more </a> </article> <hr> <article> <h3> CVE-2025-45857 - Edimax CV7428NS Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45857 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45857"> read more </a> </article> <hr> <article> <h3> CVE-2025-45858 - TOTOLINK A3002R Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45858 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45858"> read more </a> </article> <hr> <article> <h3> CVE-2025-46721 - Apache NOSurf CSRF Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46721 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>nosurf is cross-site request forgery (CSRF) protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site (either via XSS, or otherwise) to bypass CSRF checks and issue requests on user's behalf. Due to misuse of the Go `net/http` library, nosurf categorizes all incoming requests as plain-text HTTP requests, in which case the `Referer` header is not checked to have the same origin as the target webpage. If the attacker has control over HTML contents on either the target website (e.g. `example.com`), or on a website hosted on a subdomain of the target (e.g. `attacker.example.com`), they will also be able to manipulate cookies set for the target website. By acquiring the secret CSRF token from the cookie, or overriding the cookie with a new token known to the attacker, `attacker.example.com` is able to craft cross-site requests to `example.com`. A patch for the issue was released in nosurf 1.2.0. In lieu of upgrading to a patched version of nosurf, users may additionally use another HTTP middleware to ensure that a non-safe HTTP request is coming from the same origin (e.g. by requiring a `Sec-Fetch-Site: same-origin` header in the request). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46721"> read more </a> </article> <hr> <article> <h3> CVE-2025-47204 - Bootstrap Multiselect PHP Post Data Echos Reflective Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47204 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47204"> read more </a> </article> <hr> <article> <h3> CVE-2025-47276 - Actualizer Weak Password Hashing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47276 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS). Prior to version 1.2.0, Actualizer uses OpenSSL's "-passwd" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer users building a full Debian Operating System are affected. Users should upgrade to version 1.2.0 of Actualizer. Existing OS deployment requires manual password changes against the alpha and root accounts. The change will deploy's Debian's yescript overriding the older SHA512 hash created by OpenSSL. As a workaround, users need to reset both `root` and "Alpha" users' passwords. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47276"> read more </a> </article> <hr> <article> <h3> CVE-2025-47278 - Flask itsdangerous Incorrect Fallback Key Configuration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47278 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the `itsdangerous` library. A list of keys can be passed, and it expects the last (top) key in the list to be the most recent key, and uses that for signing. Flask was incorrectly constructing that list in reverse, passing the signing key first. Sites that have opted-in to use key rotation by setting `SECRET_KEY_FALLBACKS` care likely to unexpectedly be signing their sessions with stale keys, and their transition to fresher keys will be impeded. Sessions are still signed, so this would not cause any sort of data integrity loss. Version 3.1.1 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47278"> read more </a> </article> <hr> <article> <h3> CVE-2025-4427 - Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4427 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4427"> read more </a> </article> <hr> <article> <h3> CVE-2025-4428 - Ivanti Endpoint Manager Mobile Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4428 <br> <strong>Published : </strong> May 13, 2025, 4:15 p.m. | 35 minutes ago <br> <strong>Description : </strong>Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4428"> read more </a> </article> <hr> <article> <h3> CVE-2025-28057 - Owl-Admin SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28057 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28057"> read more </a> </article> <hr> <article> <h3> CVE-2025-30159 - Kirby Path Traversal and Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30159 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `snippet()` helper or `$kirby->snippet()` method with a dynamic snippet name (such as a snippet name that depends on request or user data). Sites that only use fixed calls to the `snippet()` helper/`$kirby->snippet()` method (i.e. calls with a simple string for the snippet name) are *not* affected. A missing path traversal check allowed attackers to navigate and access all files on the server that were accessible to the PHP process, including files outside of the snippets root or even outside of the Kirby installation. PHP code within such files was executed. Such attacks first require an attack vector in the site code that is caused by dynamic snippet names, such as `snippet('tags-' . get('tags'))`. It generally also requires knowledge of the site structure and the server's file system by the attacker, although it can be possible to find vulnerable setups through automated methods such as fuzzing. In a vulnerable setup, this could cause damage to the confidentiality and integrity of the server. The problem has been patched in Kirby 3.9.8.3, Kirby 3.10.1.2, and Kirby 4.7.1. In all of the mentioned releases, Kirby maintainers have added a check for the snippet path that ensures that the resulting path is contained within the configured snippets root. Snippet paths that point outside of the snippets root will not be loaded. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30159"> read more </a> </article> <hr> <article> <h3> CVE-2025-32756 - Fortinet FortiVoice Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32756 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 35 minutes ago <br> <strong>Description : </strong>A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7.2.0 through 7.2.4, 7.0.0 through 7.0.6, FortiCamera versions 2.1.0 through 2.1.3, 2.0 all versions, 1.1 all versions, allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32756"> read more </a> </article> <hr> <article> <h3> CVE-2025-44039 - CP-XR-DE21-S 4G Router Firmware UART Console Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-44039 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console. This vulnerability allows local attackers to connect to the UART port via a serial connection, read all boot sequence, and revealing internal system details and sensitive information without any authentication. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44039"> read more </a> </article> <hr> <article> <h3> CVE-2025-44831 - EngineerCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44831 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44831"> read more </a> </article> <hr> <article> <h3> CVE-2025-45859 - TOTOLINK A3002R Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45859 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45859"> read more </a> </article> <hr> <article> <h3> CVE-2025-45864 - TOTOLINK A3002R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45864 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45864"> read more </a> </article> <hr> <article> <h3> CVE-2025-45866 - TOTOLINK A3002R Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45866 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45866"> read more </a> </article> <hr> <article> <h3> CVE-2025-45867 - TOTOLINK A3002R Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45867 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45867"> read more </a> </article> <hr> <article> <h3> CVE-2024-12533 - Apache Phoenix SecureCore Technology Input Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-12533 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12533"> read more </a> </article> <hr> <article> <h3> CVE-2024-35281 - FortiClientMac and FortiVoiceUCDesktop Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-35281 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-35281"> read more </a> </article> <hr> <article> <h3> CVE-2025-22460 - Ivanti Cloud Services Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22460 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22460"> read more </a> </article> <hr> <article> <h3> CVE-2025-22859 - FortiClientEMS Relative Path Traversal File Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22859 <br> <strong>Published : </strong> May 13, 2025, 3:15 p.m. | 1 hour, 2 minutes ago <br> <strong>Description : </strong>A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upload requests. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22859"> read more </a> </article> <hr> <article> <h3> CVE-2024-36340 - AMD uProf File Deletion/Disclosure Junction Point Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-36340 <br> <strong>Published : </strong> May 13, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-36340"> read more </a> </article> <hr> <article> <h3> CVE-2024-42446 - APTIOV BIOS TOCTOU Race Condition Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42446 <br> <strong>Published : </strong> May 13, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42446"> read more </a> </article> <hr> <article> <h3> CVE-2025-4649 - Centreon Web Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4649 <br> <strong>Published : </strong> May 13, 2025, 12:15 p.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>Improper Privilege Management vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4649"> read more </a> </article> <hr> <article> <h3> CVE-2025-32917 - Checkmk Java Home Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-32917 <br> <strong>Published : </strong> May 13, 2025, 11:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p49 (EOL) allow user with write access to JAVA_HOME/bin directory to escalate privileges. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32917"> read more </a> </article> <hr> <article> <h3> CVE-2025-40580 - Siemens SCALANCE LPE9403 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40580 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40580"> read more </a> </article> <hr> <article> <h3> CVE-2025-40581 - Siemens SCALANCE LPE9403 Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40581 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and to read and modify the configuration parameters. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40581"> read more </a> </article> <hr> <article> <h3> CVE-2025-40582 - Siemens SCALANCE LPE9403 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40582 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the device. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40582"> read more </a> </article> <hr> <article> <h3> CVE-2025-40583 - SCALANCE LPE9403 Cleartext Sensitive Information Transmission </h3> <p> <strong>CVE ID : </strong>CVE-2025-40583 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with SINEMA Remote Connect Edge Client installed). Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40583"> read more </a> </article> <hr> <article> <h3> CVE-2025-40628 - DomainsPRO SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-40628 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update and delete databases via the “d” parameter in the “/article.php” endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40628"> read more </a> </article> <hr> <article> <h3> CVE-2025-4646 - Centreon Web Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4646 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>Improper Privilege Management vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4646"> read more </a> </article> <hr> <article> <h3> CVE-2025-4647 - Centreon Web Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4647 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS. A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4647"> read more </a> </article> <hr> <article> <h3> CVE-2025-4648 - Centreon Web Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4648 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 6 hours, 2 minutes ago <br> <strong>Description : </strong>Download of Code Without Integrity Check vulnerability in Centreon web allows Reflected XSS. A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4648"> read more </a> </article> <hr> <article> <h3> CVE-2025-33025 - RUGGEDCOM ROX Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33025 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'traceroute' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33025"> read more </a> </article> <hr> <article> <h3> CVE-2025-40555 - APOGEE PXC+TALON TC Series BACnet Broadcast Storm Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40555 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted message that results in a partial denial of service condition of the targeted device, and potentially reduce the availability of BACnet network. A power cycle is required to restore the device's normal operation. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40555"> read more </a> </article> <hr> <article> <h3> CVE-2025-40556 - "BACnet ATEC Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40556 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versions). Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service condition of the targeted device. A power cycle is required to restore the device's normal operation. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40556"> read more </a> </article> <hr> <article> <h3> CVE-2025-40566 - Siemens SIMATIC PCS neo Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40566 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40566"> read more </a> </article> <hr> <article> <h3> CVE-2025-40571 - Mendix OIDC SSO Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-40571 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in Mendix OIDC SSO (Mendix 10 compatible) (All versions < V4.0.0), Mendix OIDC SSO (Mendix 9 compatible) (All versions). The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development. <br> <strong>Severity:</strong> 2.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40571"> read more </a> </article> <hr> <article> <h3> CVE-2025-40572 - Siemens SCALANCE LPE9403 Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-40572 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly assign permissions to critical ressources. This could allow a non-privileged local attacker to access sensitive information stored on the device. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40572"> read more </a> </article> <hr> <article> <h3> CVE-2025-40573 - SCALANCE LPE9403 Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40573 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to path traversal attacks. This could allow a privileged local attacker to restore backups that are outside the backup folder. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40573"> read more </a> </article> <hr> <article> <h3> CVE-2025-40574 - "Siemens SCALANCE LPE9403 Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40574 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly assign permissions to critical ressources. This could allow a non-privileged local attacker to interact with the backupmanager service. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40574"> read more </a> </article> <hr> <article> <h3> CVE-2025-40575 - SCALANCE LPE9403 Remote Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40575 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40575"> read more </a> </article> <hr> <article> <h3> CVE-2025-40576 - "SCALANCE LPE9403 Profinet Packet Validation Remote Crash Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40576 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40576"> read more </a> </article> <hr> <article> <h3> CVE-2025-40577 - "SCALANCE LPE9403 Profinet Packet Validation Remote Code Execution Denial of Service" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40577 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40577"> read more </a> </article> <hr> <article> <h3> CVE-2025-40578 - "SCALANCE LPE9403 Profinet Packet Flood Crash Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40578 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession. An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short time frame, which leads to a crash of the dcpd process. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40578"> read more </a> </article> <hr> <article> <h3> CVE-2025-40579 - Siemens SCALANCE LPE9403 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40579 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices are vulnerable to a stack-based buffer overflow. This could allow a non-privileged local attacker to execute arbitrary code on the device or to cause a denial of service condition. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40579"> read more </a> </article> <hr> <article> <h3> CVE-2025-32469 - RUGGEDCOM ROX Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32469 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'ping' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32469"> read more </a> </article> <hr> <article> <h3> CVE-2025-33024 - RUGGEDCOM ROX Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33024 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'tcpdump' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33024"> read more </a> </article> <hr> <article> <h3> CVE-2025-31930 - Schneider Electric Modbus Remote Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31930 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions < V2.135), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions < V2.135), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions < V2.135), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions < V2.135), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions < V2.135), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions < V2.135), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions < V2.135). Affected devices contain Modbus service enabled by default. This could allow an attacker connected to the same network to remotely control the EV charger. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31930"> read more </a> </article> <hr> <article> <h3> CVE-2025-32454 - Siemens Teamcenter Visualization Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32454 <br> <strong>Published : </strong> May 13, 2025, 10:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010), Teamcenter Visualization V2406 (All versions < V2406.0008), Teamcenter Visualization V2412 (All versions < V2412.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32454"> read more </a> </article> <hr> <article> <h3> CVE-2025-27696 - Apache Superset Unauthorized Data Takeover Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27696 <br> <strong>Published : </strong> May 13, 2025, 9:15 a.m. | 28 minutes ago <br> <strong>Description : </strong>Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27696"> read more </a> </article> <hr> <article> <h3> CVE-2025-3916 - Adobe Photoshop Stack-based Buffer Overflow Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3916 <br> <strong>Published : </strong> May 13, 2025, 9:15 a.m. | 28 minutes ago <br> <strong>Description : </strong>CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file (SSD file) provided by the attacker. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3916"> read more </a> </article> <hr> <article> <h3> CVE-2025-41645 - D-Link Device Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41645 <br> <strong>Published : </strong> May 13, 2025, 9:15 a.m. | 28 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41645"> read more </a> </article> <hr> <article> <h3> Lettres drsquo;information </h3> <p><p>Actualités, contenus et ressources thématiques pour vous sensibiliser aux risques numériques et aux bonnes pratiques associées, informations sur les cybermenaces… Retrouvez dans cette section les lettres d’informations de Cybermalveillance.gouv.fr. </p> </p> <p class="feed-time"> Tue, 13 May 2025 09:00:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/lettres-d-information"> read more </a> </article> <hr> <article> <h3> CVE-2025-3107 - "WordPress Newsletters SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3107 <br> <strong>Published : </strong> May 13, 2025, 7:15 a.m. | 2 hours, 28 minutes ago <br> <strong>Description : </strong>The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3107"> read more </a> </article> <hr> <article> <h3> CVE-2025-4317 - TheGem WordPress Theme Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4317 <br> <strong>Published : </strong> May 13, 2025, 7:15 a.m. | 2 hours, 28 minutes ago <br> <strong>Description : </strong>The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4317"> read more </a> </article> <hr> <article> <h3> CVE-2025-4339 - WordPress TheGem Theme Unauthenticated Theme Option Update Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4339 <br> <strong>Published : </strong> May 13, 2025, 7:15 a.m. | 2 hours, 28 minutes ago <br> <strong>Description : </strong>The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary theme options. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4339"> read more </a> </article> <hr> <article> <h3> CVE-2025-4473 - WordPress Frontend Dashboard Plugin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4473 <br> <strong>Published : </strong> May 13, 2025, 7:15 a.m. | 2 hours, 28 minutes ago <br> <strong>Description : </strong>The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4473"> read more </a> </article> <hr> <article> <h3> CVE-2025-4474 - WordPress Frontend Dashboard Plugin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4474 <br> <strong>Published : </strong> May 13, 2025, 7:15 a.m. | 2 hours, 28 minutes ago <br> <strong>Description : </strong>The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the plugin’s 'register' role setting to make new user registrations default to the administrator role, leading to an elevation of privileges to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4474"> read more </a> </article> <hr> <article> <h3> CVE-2025-22246 - Cloud Foundry UAA Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-22246 <br> <strong>Published : </strong> May 13, 2025, 6:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs. <br> <strong>Severity:</strong> 3.0 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22246"> read more </a> </article> <hr> <article> <h3> CVE-2025-22249 - VMware Aria Automation DOM Based Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-22249 <br> <strong>Published : </strong> May 13, 2025, 6:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious crafted payload URL. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22249"> read more </a> </article> <hr> <article> <h3> CVE-2025-4632 - Samsung MagicINFO 9 Server Path Traversal Write Arbitrary File Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4632 <br> <strong>Published : </strong> May 13, 2025, 6:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4632"> read more </a> </article> <hr> <article> <h3> CVE-2025-47858 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-47858 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47858"> read more </a> </article> <hr> <article> <h3> CVE-2025-47859 - Apache HTTP Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47859 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47859"> read more </a> </article> <hr> <article> <h3> CVE-2025-47860 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47860 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47860"> read more </a> </article> <hr> <article> <h3> CVE-2025-47861 - Apache HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-47861 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47861"> read more </a> </article> <hr> <article> <h3> CVE-2025-47862 - Apache HTTP Web Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47862 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47862"> read more </a> </article> <hr> <article> <h3> CVE-2025-47863 - Google Chrome Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-47863 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47863"> read more </a> </article> <hr> <article> <h3> CVE-2025-47864 - Apache HTTP Server XML Entity Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47864 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47864"> read more </a> </article> <hr> <article> <h3> CVE-2025-4396 - Relevanssi WordPress SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4396 <br> <strong>Published : </strong> May 13, 2025, 4:16 a.m. | 5 hours, 27 minutes ago <br> <strong>Description : </strong>The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4396"> read more </a> </article> <hr> <article> <h3> CVE-2025-35471 - Conda Forge OpenSSL-Feedstock Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-35471 <br> <strong>Published : </strong> May 13, 2025, 2:15 a.m. | 7 hours, 28 minutes ago <br> <strong>Description : </strong>conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35471"> read more </a> </article> <hr> <article> <h3> CVE-2025-43007 - SAP Service Parts Management Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43007 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43007"> read more </a> </article> <hr> <article> <h3> CVE-2025-43008 - Microsoft SharePoint Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43008 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43008"> read more </a> </article> <hr> <article> <h3> CVE-2025-43009 - SAP Service Parts Management Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43009 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43009"> read more </a> </article> <hr> <article> <h3> CVE-2025-43010 - SAP S/4HANA Cloud Private Edition or on Premise ABAP Program Replacement Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43010 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high impact on integrity and availability to the application. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43010"> read more </a> </article> <hr> <article> <h3> CVE-2025-43011 - SAP Landscape Transformation Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43011 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43011"> read more </a> </article> <hr> <article> <h3> CVE-2025-43004 - Apache Cassandra Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43004 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enable outside users to access customer data when they access these dashboards. Since no mechanisms exist to enforce authentication, malicious unauthenticated users can view non-sensitive customer information. However, this does not affect data integrity or availability. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43004"> read more </a> </article> <hr> <article> <h3> CVE-2025-43005 - SAP GUI for Windows Insecure Credential Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43005 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43005"> read more </a> </article> <hr> <article> <h3> CVE-2025-43006 - SAP Supplier Relationship Management XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43006 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute malicious scripts in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43006"> read more </a> </article> <hr> <article> <h3> CVE-2025-42997 - SAP Gateway Client Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-42997 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on confidentiality, integrity, and availability. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42997"> read more </a> </article> <hr> <article> <h3> CVE-2025-42999 - SAP NetWeaver Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-42999 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42999"> read more </a> </article> <hr> <article> <h3> CVE-2025-43000 - Apache Struts Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43000 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application. <br> <strong>Severity:</strong> 7.9 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43000"> read more </a> </article> <hr> <article> <h3> CVE-2025-43002 - SAP S4CORE OData Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-43002 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43002"> read more </a> </article> <hr> <article> <h3> CVE-2025-43003 - SAP S/4 HANA Configuration Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-43003 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43003"> read more </a> </article> <hr> <article> <h3> CVE-2025-30012 - SAP SRM Java Applet Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30012 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM stack to accept binary Java objects in specific encoding format. On successful exploitation, an authenticated attacker with high privileges could send malicious payload request and receive an outbound DNS request, resulting in deserialization of data in the application. This vulnerability has low impact on confidentiality, integrity and availability of the application. <br> <strong>Severity:</strong> 3.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30012"> read more </a> </article> <hr> <article> <h3> CVE-2025-30018 - SAP SRM Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-30018 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an application servlet request with a crafted XML file which when parsed, enables the attacker to access sensitive files and data. This vulnerability has a high impact on the application's confidentiality, with no effect on integrity and availability of the application. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30018"> read more </a> </article> <hr> <article> <h3> CVE-2025-31329 - SAP NetWeaver Information Disclosure Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31329 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 3 hours, 41 minutes ago <br> <strong>Description : </strong>SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings. An attacker with administrative privileges can craft these instructions so that when accessed by the victim, sensitive information such as user credentials is exposed. These credentials may then be used to gain unauthorized access to local or adjacent systems. This results in high impact to Confidentiality, with no significant effect on Integrity or Availability. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31329"> read more </a> </article> <hr> <article> <h3> CVE-2025-26662 - Apache Data Services Management Console Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26662 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on the compromised link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26662"> read more </a> </article> <hr> <article> <h3> CVE-2025-30009 - SAP SRM Live Auction Cockpit Java Applet Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30009 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and integrity within the scope of that victim�s browser, with no effect on availability of the application <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30009"> read more </a> </article> <hr> <article> <h3> CVE-2025-30010 - SAP SRM Java Applet Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-30010 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to craft a malicious link, which when clicked by a victim, redirects the browser to a malicious site. On successful exploitation, the attacker could cause low impact on confidentiality and integrity with no impact on the availability of the application. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30010"> read more </a> </article> <hr> <article> <h3> CVE-2025-30011 - SAP SRM Java Applet Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-30011 <br> <strong>Published : </strong> May 13, 2025, 1:15 a.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30011"> read more </a> </article> <hr> <article> <h3> CVE-2023-49641 - Oracle Billing Software SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-49641 <br> <strong>Published : </strong> May 13, 2025, 12:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not validate the characters received and they are sent unfiltered to the database. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 13 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-49641"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Pulsy </h3> <p>nom, prénom, genre, date de naissance, commune de naissance, adresse postale, téléphone, email, données médicales, parcours de soin, date et lieux des hospitalisations</p> <p class="feed-time"> Tue May 13 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Pulsy-2025-05-13"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Dior </h3> <p> </p> <p class="feed-time"> Tue May 13 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Dior-2025-05-13"> read more </a> </article> <hr> <article> <h3> CVE-2025-46825 - Kanboard Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46825 <br> <strong>Published : </strong> May 12, 2025, 11:15 p.m. | 4 hours, 28 minutes ago <br> <strong>Description : </strong>Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting (XSS) Vulnerability in the `name` parameter of the `http://localhost/?controller=ProjectCreationController&action=create` form. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. Note that the default content security policy (CSP) blocks the JavaScript attack, though it can be exploited if an instance is badly configured and the software is vulnerable to CSS injection because of the unsafe-inline on the default CSP. Version 1.2.45 contains a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46825"> read more </a> </article> <hr> <article> <h3> CVE-2025-31259 - Apple macOS Sequoia Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31259 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 5 hours, 28 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An app may be able to gain elevated privileges. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31259"> read more </a> </article> <hr> <article> <h3> CVE-2025-31260 - Apple macOS Sequoia Permission Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31260 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 5 hours, 28 minutes ago <br> <strong>Description : </strong>A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31260"> read more </a> </article> <hr> <article> <h3> CVE-2025-31233 - Apple Video File Processing Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-31233 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31233"> read more </a> </article> <hr> <article> <h3> CVE-2025-31234 - Apple VisionOS iOS iPadOS macOS tvOS Kernel Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31234 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved input sanitization. This issue is fixed in visionOS 2.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31234"> read more </a> </article> <hr> <article> <h3> CVE-2025-31235 - "Apple iPadOS and macOS Double Free Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31235 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to cause unexpected system termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31235"> read more </a> </article> <hr> <article> <h3> CVE-2025-31236 - Apple macOS Sequoia Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31236 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31236"> read more </a> </article> <hr> <article> <h3> CVE-2025-31237 - Apple AFP Network Share System Termination Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31237 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. Mounting a maliciously crafted AFP network share may lead to system termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31237"> read more </a> </article> <hr> <article> <h3> CVE-2025-31238 - Apple Safari Web Content Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31238 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31238"> read more </a> </article> <hr> <article> <h3> CVE-2025-31239 - Apple File Parsing Use-after-free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31239 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Parsing a file may lead to an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31239"> read more </a> </article> <hr> <article> <h3> CVE-2025-31240 - Apple AFP Network Share Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31240 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. Mounting a maliciously crafted AFP network share may lead to system termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31240"> read more </a> </article> <hr> <article> <h3> CVE-2025-31241 - Apple iOS/WatchOS tvOS/PadOS Double Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31241 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A double free issue was addressed with improved memory management. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31241"> read more </a> </article> <hr> <article> <h3> CVE-2025-31242 - Apple iPadOS and macOS Private Data Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31242 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31242"> read more </a> </article> <hr> <article> <h3> CVE-2025-31244 - Apple macOS Sandbox Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-31244 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31244"> read more </a> </article> <hr> <article> <h3> CVE-2025-31245 - Apple macOS Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31245 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31245"> read more </a> </article> <hr> <article> <h3> CVE-2025-31246 - Apple macOS AFP Server Kernel Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31246 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. Connecting to a malicious AFP server may corrupt kernel memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31246"> read more </a> </article> <hr> <article> <h3> CVE-2025-31247 - Apple macOS Unauthorized File System Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-31247 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An attacker may gain access to protected parts of the file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31247"> read more </a> </article> <hr> <article> <h3> CVE-2025-31249 - Apple macOS Sequoia Logic Flaw Allows Sensitive Data Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-31249 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31249"> read more </a> </article> <hr> <article> <h3> CVE-2025-31250 - Apple macOS Sequoia Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31250 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31250"> read more </a> </article> <hr> <article> <h3> CVE-2025-31251 - Apple Media File Processing Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-31251 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31251"> read more </a> </article> <hr> <article> <h3> CVE-2025-31253 - Apple FaceTime Audio Muting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31253 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the microphone during a FaceTime call may not result in audio being silenced. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31253"> read more </a> </article> <hr> <article> <h3> CVE-2025-31256 - Apple Notes Cache Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31256 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31256"> read more </a> </article> <hr> <article> <h3> CVE-2025-31257 - Apple Safari Web Content Processing Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31257 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31257"> read more </a> </article> <hr> <article> <h3> CVE-2025-31258 - This issue was addressed by removing the vulnerabl </h3> <p> <strong>CVE ID : </strong>CVE-2025-31258 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31258"> read more </a> </article> <hr> <article> <h3> CVE-2025-31232 - Apple macOS Sensitive Data Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31232 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. A sandboxed app may be able to access sensitive user data. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31232"> read more </a> </article> <hr> <article> <h3> CVE-2025-31228 - Apple Notes Lock Screen Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31228 <br> <strong>Published : </strong> May 12, 2025, 10:15 p.m. | 41 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved authentication. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access notes from the lock screen. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31228"> read more </a> </article> <hr> <article> <h3> CVE-2025-1079 - Google Web Designer Unvalidated Symbolic Link Resolution Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1079 <br> <strong>Published : </strong> May 12, 2025, 8:15 p.m. | 1 hour, 7 minutes ago <br> <strong>Description : </strong>Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1079"> read more </a> </article> <hr> <article> <h3> CVE-2024-4981 - Pagure Git Repository Symbolic Link Exfiltration </h3> <p> <strong>CVE ID : </strong>CVE-2024-4981 <br> <strong>Published : </strong> May 12, 2025, 7:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-4981"> read more </a> </article> <hr> <article> <h3> CVE-2024-4982 - Pagure Git Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-4982 <br> <strong>Published : </strong> May 12, 2025, 7:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-4982"> read more </a> </article> <hr> <article> <h3> CVE-2024-55466 - ThingsBoard Image Gallery Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2024-55466 <br> <strong>Published : </strong> May 12, 2025, 7:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55466"> read more </a> </article> <hr> <article> <h3> CVE-2025-47682 - Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47682 <br> <strong>Published : </strong> May 12, 2025, 7:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce allows SQL Injection.This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.8.2. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47682"> read more </a> </article> <hr> <article> <h3> CVE-2023-34732 - Flytxt NEON-dX Password Brute Force Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-34732 <br> <strong>Published : </strong> May 12, 2025, 6:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-34732"> read more </a> </article> <hr> <article> <h3> CVE-2025-44175 - "Tenda AC10 Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-44175 <br> <strong>Published : </strong> May 12, 2025, 6:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44175"> read more </a> </article> <hr> <article> <h3> CVE-2025-44176 - Tenda FH451 Unauthenticated Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44176 <br> <strong>Published : </strong> May 12, 2025, 6:15 p.m. | 3 hours, 7 minutes ago <br> <strong>Description : </strong>Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44176"> read more </a> </article> <hr> <article> <h3> CVE-2025-3632 - IBM 4769 Developers Toolkit Buffer Overflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-3632 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module (HSM) due to improper memory allocation of an excessive size. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3632"> read more </a> </article> <hr> <article> <h3> CVE-2025-45779 - Tenda AC10 Unauthenticated Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45779 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45779"> read more </a> </article> <hr> <article> <h3> CVE-2025-46739 - Adobe Acrobat Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46739 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An unauthenticated user could discover account credentials via a brute-force attack without rate limiting <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46739"> read more </a> </article> <hr> <article> <h3> CVE-2025-46740 - Adobe Acrobat Account Name Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46740 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user without user administrative permissions could change the administrator Account Name. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46740"> read more </a> </article> <hr> <article> <h3> CVE-2025-46741 - Blueframe Session Fixation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46741 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred. <br> <strong>Severity:</strong> 5.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46741"> read more </a> </article> <hr> <article> <h3> CVE-2025-46742 - Oracle WebLogic Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46742 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>Users who were required to change their password could still access system information before changing their password <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46742"> read more </a> </article> <hr> <article> <h3> CVE-2025-46743 - Apache HTTP Server Session Token Reuse </h3> <p> <strong>CVE ID : </strong>CVE-2025-46743 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user's token could be used by another source after the user had logged out prior to the token expiring. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46743"> read more </a> </article> <hr> <article> <h3> CVE-2025-46744 - Apache Struts Username Manipulation </h3> <p> <strong>CVE ID : </strong>CVE-2025-46744 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated administrator could modify the Created By username for a user account <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46744"> read more </a> </article> <hr> <article> <h3> CVE-2025-46745 - Apache User Account Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46745 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user without user-management permissions could view other users' account information. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46745"> read more </a> </article> <hr> <article> <h3> CVE-2025-46746 - Citrix SharePoint Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46746 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An administrator could discover another account's credentials. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46746"> read more </a> </article> <hr> <article> <h3> CVE-2025-46747 - Adobe Acrobat Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46747 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user without user-management permissions could identify other user accounts. <br> <strong>Severity:</strong> 5.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46747"> read more </a> </article> <hr> <article> <h3> CVE-2025-46748 - Apache Password Change Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46748 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user attempting to change their password could do so without using the current password. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46748"> read more </a> </article> <hr> <article> <h3> CVE-2025-46749 - Apache Struts XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-46749 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46749"> read more </a> </article> <hr> <article> <h3> CVE-2025-46750 - SELogic BIOS Password Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46750 <br> <strong>Published : </strong> May 12, 2025, 5:15 p.m. | 4 hours, 7 minutes ago <br> <strong>Description : </strong>SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46750"> read more </a> </article> <hr> <article> <h3> CVE-2025-46737 - Cisco SEL Cross-Origin Resource Sharing (CORS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46737 <br> <strong>Published : </strong> May 12, 2025, 4:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46737"> read more </a> </article> <hr> <article> <h3> CVE-2025-46738 - Apache SEL arbitrary code execution vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46738 <br> <strong>Published : </strong> May 12, 2025, 4:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46738"> read more </a> </article> <hr> <article> <h3> CVE-2025-47578 - Twitter Follow Button Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47578 <br> <strong>Published : </strong> May 12, 2025, 4:15 p.m. | 5 hours, 7 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Caissie BNS Twitter Follow Button allows DOM-Based XSS.This issue affects BNS Twitter Follow Button: from n/a through 0.3.8. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47578"> read more </a> </article> <hr> <article> <h3> CVE-2025-44830 - EngineerCMS SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-44830 <br> <strong>Published : </strong> May 12, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44830"> read more </a> </article> <hr> <article> <h3> CVE-2025-44022 - Vvveb CMS Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-44022 <br> <strong>Published : </strong> May 12, 2025, 4:15 p.m. | 2 hours, 31 minutes ago <br> <strong>Description : </strong>An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44022"> read more </a> </article> <hr> <article> <h3> CVE-2025-46717 - "Sudo-rs Path Traversal Information Disclosure" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46717 <br> <strong>Published : </strong> May 12, 2025, 3:16 p.m. | 3 hours, 30 minutes ago <br> <strong>Description : </strong>sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list <pathname>`. Users with local access to a machine can discover the existence/non-existence of certain files, revealing potentially sensitive information in the file names. This information can also be used in conjunction with other attacks. Version 0.2.6 fixes the vulnerability. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46717"> read more </a> </article> <hr> <article> <h3> CVE-2025-46718 - "sudo-rs Sudo Privilege Listing Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46718 <br> <strong>Published : </strong> May 12, 2025, 3:16 p.m. | 3 hours, 30 minutes ago <br> <strong>Description : </strong>sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. Attackers can collect information that can be used to more targeted attacks. Systems where users either do not have sudo privileges or have the ability to run all commands as root through sudo (the default configuration on most systems) are not affected by this advisory. Version 0.2.6 fixes the vulnerability. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46718"> read more </a> </article> <hr> <article> <h3> CVE-2025-47274 - ToolHive Inadvertent Secrets Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47274 <br> <strong>Published : </strong> May 12, 2025, 3:16 p.m. | 3 hours, 30 minutes ago <br> <strong>Description : </strong>ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Due to the ordering of code used to start an MCP server container, versions of ToolHive prior to 0.0.33 inadvertently store secrets in the run config files which are used to restart stopped containers. This means that an attacker who has access to the home folder of the user who starts the MCP server can read secrets without needing access to the secrets store itself. This only applies to secrets which were used in containers whose run configs exist at a point in time - other secrets remaining inaccessible. ToolHive 0.0.33 fixes the issue. Some workarounds are available. Stop and delete any running MCP servers, or manually remove any runconfigs from `$HOME/Library/Application Support/toolhive/runconfigs/` (macOS) or `$HOME/.state/toolhive/runconfigs/` (Linux). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47274"> read more </a> </article> <hr> <article> <h3> CVE-2025-46610 - Artec EMA Mail CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46610 <br> <strong>Published : </strong> May 12, 2025, 3:16 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>ARTEC EMA Mail 6.92 allows CSRF. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46610"> read more </a> </article> <hr> <article> <h3> CVE-2025-46611 - ARTEC EMA Mail Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46611 <br> <strong>Published : </strong> May 12, 2025, 3:16 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46611"> read more </a> </article> <hr> <article> <h3> CVE-2024-56523 - Radware Cloud Web Application Firewall (WAF) HTTP Request Smuggling </h3> <p> <strong>CVE ID : </strong>CVE-2024-56523 <br> <strong>Published : </strong> May 12, 2025, 3:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56523"> read more </a> </article> <hr> <article> <h3> CVE-2024-56524 - Radware Cloud Web Application Firewall (WAF) URL Filter Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56524 <br> <strong>Published : </strong> May 12, 2025, 3:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special character to the request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56524"> read more </a> </article> <hr> <article> <h3> CVE-2025-26841 - WPEverest Everest Forms Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-26841 <br> <strong>Published : </strong> May 12, 2025, 3:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26841"> read more </a> </article> <hr> <article> <h3> CVE-2025-26846 - Znuny Generic Interface Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-26846 <br> <strong>Published : </strong> May 12, 2025, 3:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26846"> read more </a> </article> <hr> <article> <h3> CVE-2025-45835 - Netis WF2880 Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45835 <br> <strong>Published : </strong> May 12, 2025, 2:15 p.m. | 2 hours, 41 minutes ago <br> <strong>Description : </strong>A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45835"> read more </a> </article> <hr> <article> <h3> CVE-2025-40626 - AbanteCart Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40626 <br> <strong>Published : </strong> May 12, 2025, 12:15 p.m. | 4 hours, 41 minutes ago <br> <strong>Description : </strong>Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through "/about_us?[XSS_PAYLOAD]". <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40626"> read more </a> </article> <hr> <article> <h3> CVE-2025-40627 - AbanteCart Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40627 <br> <strong>Published : </strong> May 12, 2025, 12:15 p.m. | 4 hours, 41 minutes ago <br> <strong>Description : </strong>Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through "/eyes? [XSS_PAYLOAD]". <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40627"> read more </a> </article> <hr> <article> <h3> CVE-2025-22247 - VMware Tools Insecure File Handling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22247 <br> <strong>Published : </strong> May 12, 2025, 11:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22247"> read more </a> </article> <hr> <article> <h3> CVE-2025-32390 - EspoCRM HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32390 <br> <strong>Published : </strong> May 12, 2025, 11:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>EspoCRM is a free, open-source customer relationship management platform. Prior to version 9.0.8, HTML Injection in Knowledge Base (KB) articles leads to complete page defacement imitating the login page. Authenticated users with the read knowledge article privilege can browse to the KB article and if they submit their credentials, they get captured in plain text. The vulnerability is allowed by overly permissive HTML editing being allowed on the KB articles. Any authenticated user with the privilege to read KB articles is impacted. In an enterprise with multiple applications, the malicious KB article could be edited to match the login pages of other applications, which would make it useful for credential harvesting against other applications as well. Version 9.0.8 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32390"> read more </a> </article> <hr> <article> <h3> CVE-2025-46729 - Julmud/phpDVDProfiler Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46729 <br> <strong>Published : </strong> May 12, 2025, 11:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46729"> read more </a> </article> <hr> <article> <h3> CVE-2025-47270 - Nimiq Albatross Denial of Service Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-47270 <br> <strong>Published : </strong> May 12, 2025, 11:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The `nimiq-network-libp2p` subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service (DoS) attack due to uncontrolled memory allocation. Specifically, the implementation of the `Discovery` network message handling allocates a buffer based on a length value provided by the peer, without enforcing an upper bound. Since this length is a `u32`, a peer can trigger allocations of up to 4 GB, potentially leading to memory exhaustion and node crashes. As Discovery messages are regularly exchanged for peer discovery, this vulnerability can be exploited repeatedly. The patch for this vulnerability is formally released as part of v1.1.0. The patch implements a limit to the discovery message size of 1 MB and also resizes the message buffer size incrementally as the data is read. No known workarounds are available. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47270"> read more </a> </article> <hr> <article> <h3> CVE-2025-47271 - GitHub OZI Action Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47271 <br> <strong>Published : </strong> May 12, 2025, 11:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects arbitrary code. This is patched in 1.13.6. As a workaround, one may downgrade to a version prior to 1.13.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47271"> read more </a> </article> <hr> <article> <h3> CVE-2025-1533 - ASUS Armoury Crate App Stack Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-1533 <br> <strong>Published : </strong> May 12, 2025, 10:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1533"> read more </a> </article> <hr> <article> <h3> CVE-2025-3496 - D-Link Bluetooth/RS-232 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3496 <br> <strong>Published : </strong> May 12, 2025, 8:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3496"> read more </a> </article> <hr> <article> <h3> CVE-2025-41393 - Ricoh Web Image Monitor Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41393 <br> <strong>Published : </strong> May 12, 2025, 8:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendor under [References]. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41393"> read more </a> </article> <hr> <article> <h3> CVE-2025-4560 - Netvision ISOinsight Missing Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4560 <br> <strong>Published : </strong> May 12, 2025, 7:15 a.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4560"> read more </a> </article> <hr> <article> <h3> CVE-2025-4561 - KingFor KFOX Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4561 <br> <strong>Published : </strong> May 12, 2025, 7:15 a.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>The KFOX from KingFor has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privilege to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4561"> read more </a> </article> <hr> <article> <h3> CVE-2025-3597 - Firelight Lightbox WordPress Plugin Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3597 <br> <strong>Published : </strong> May 12, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3597"> read more </a> </article> <hr> <article> <h3> CVE-2025-3649 - LightPress Lightbox Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3649 <br> <strong>Published : </strong> May 12, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conduct Stored XSS attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3649"> read more </a> </article> <hr> <article> <h3> CVE-2025-4559 - Netvision ISOinsight SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4559 <br> <strong>Published : </strong> May 12, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>The ISOinsight from Netvision has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4559"> read more </a> </article> <hr> <article> <h3> CVE-2025-4558 - WormHole Tech GPM Unauthenticated Password Change Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4558 <br> <strong>Published : </strong> May 12, 2025, 4:15 a.m. | 10 hours, 41 minutes ago <br> <strong>Description : </strong>The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4558"> read more </a> </article> <hr> <article> <h3> CVE-2025-4555 - Okcat Parking Management Platform ZONG YU Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4555 <br> <strong>Published : </strong> May 12, 2025, 3:15 a.m. | 11 hours, 41 minutes ago <br> <strong>Description : </strong>The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access system functions. These functions include opening gates, viewing license plates and parking records, and restarting the system. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4555"> read more </a> </article> <hr> <article> <h3> CVE-2025-4556 - Okcat Parking Management Platform ZONG YU Remote Code Execution (RCE) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4556 <br> <strong>Published : </strong> May 12, 2025, 3:15 a.m. | 11 hours, 41 minutes ago <br> <strong>Description : </strong>The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4556"> read more </a> </article> <hr> <article> <h3> CVE-2025-4557 - ZONG YU Parking Management System Missing Authentication Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4557 <br> <strong>Published : </strong> May 12, 2025, 3:15 a.m. | 11 hours, 41 minutes ago <br> <strong>Description : </strong>The specific APIs of Parking Management System from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific APIs and operate system functions. These functions include opening gates and restarting the system. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4557"> read more </a> </article> <hr> <article> <h3> CVE-2025-4553 - PHPGurukul Apartment Visitors Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4553 <br> <strong>Published : </strong> May 12, 2025, 1:15 a.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4553"> read more </a> </article> <hr> <article> <h3> CVE-2025-4554 - PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4554 <br> <strong>Published : </strong> May 12, 2025, 1:15 a.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-passreports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4554"> read more </a> </article> <hr> <article> <h3> CVE-2025-4552 - ContiNew Admin Remote Unverified Password Change Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4552 <br> <strong>Published : </strong> May 12, 2025, 12:15 a.m. | 14 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 12 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4552"> read more </a> </article> <hr> <article> <h3> CVE-2025-4550 - PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4550 <br> <strong>Published : </strong> May 11, 2025, 11:15 p.m. | 15 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4550"> read more </a> </article> <hr> <article> <h3> CVE-2025-4551 - ContiNew Admin Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4551 <br> <strong>Published : </strong> May 11, 2025, 11:15 p.m. | 15 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4551"> read more </a> </article> <hr> <article> <h3> CVE-2025-4549 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4549 <br> <strong>Published : </strong> May 11, 2025, 10:15 p.m. | 14 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4549"> read more </a> </article> <hr> <article> <h3> CVE-2025-4548 - Campcodes Online Food Ordering System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4548 <br> <strong>Published : </strong> May 11, 2025, 10:15 p.m. | 13 hours, 52 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4548"> read more </a> </article> <hr> <article> <h3> CVE-2025-4547 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4547 <br> <strong>Published : </strong> May 11, 2025, 9:15 p.m. | 14 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4547"> read more </a> </article> <hr> <article> <h3> CVE-2025-4545 - CTCMS File Handler Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4545 <br> <strong>Published : </strong> May 11, 2025, 8:15 p.m. | 14 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4545"> read more </a> </article> <hr> <article> <h3> CVE-2025-4546 - 1Panel-dev MaxKB CSV Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4546 <br> <strong>Published : </strong> May 11, 2025, 8:15 p.m. | 14 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4546"> read more </a> </article> <hr> <article> <h3> CVE-2025-4544 - D-Link DI-8100 Jhttpd Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4544 <br> <strong>Published : </strong> May 11, 2025, 7:15 p.m. | 15 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_udp_max/def_udp_time/def_icmp_max leads to stack-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4544"> read more </a> </article> <hr> <article> <h3> CVE-2025-4542 - Freeebird Hotel Cross-Domain Policy Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4542 <br> <strong>Published : </strong> May 11, 2025, 6:15 p.m. | 16 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4542"> read more </a> </article> <hr> <article> <h3> CVE-2025-4543 - "LyLme Spage SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4543 <br> <strong>Published : </strong> May 11, 2025, 6:15 p.m. | 16 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4543"> read more </a> </article> <hr> <article> <h3> CVE-2025-4541 - LmxCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4541 <br> <strong>Published : </strong> May 11, 2025, 4:15 p.m. | 16 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4541"> read more </a> </article> <hr> <article> <h3> CVE-2025-4540 - MTSoftware C-Lodop Unquoted Search Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4540 <br> <strong>Published : </strong> May 11, 2025, 4:15 p.m. | 14 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in MTSoftware C-Lodop 6.6.1.1. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 6.6.13 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4540"> read more </a> </article> <hr> <article> <h3> CVE-2025-4538 - KKFileView Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4538 <br> <strong>Published : </strong> May 11, 2025, 11:15 a.m. | 19 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4538"> read more </a> </article> <hr> <article> <h3> CVE-2025-4539 - Hainan ToDesk DLL File Parser Uncontrolled Search Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4539 <br> <strong>Published : </strong> May 11, 2025, 11:15 a.m. | 19 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4539"> read more </a> </article> <hr> <article> <h3> CVE-2025-4537 - RuoYi-Vue Cleartext Storage of Sensitive Information in Cookie </h3> <p> <strong>CVE ID : </strong>CVE-2025-4537 <br> <strong>Published : </strong> May 11, 2025, 10:15 a.m. | 20 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive information in a cookie. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4537"> read more </a> </article> <hr> <article> <h3> CVE-2025-4536 - Gosuncn Technology Group Audio-Visual Integrated Management Platform Remote Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4536 <br> <strong>Published : </strong> May 11, 2025, 9:15 a.m. | 19 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4536"> read more </a> </article> <hr> <article> <h3> CVE-2025-4534 - SunGrow Logger1000 Remote Weak Password Requirements Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4534 <br> <strong>Published : </strong> May 11, 2025, 8:15 a.m. | 20 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4534"> read more </a> </article> <hr> <article> <h3> CVE-2025-4535 - Gosuncn Technology Group Audio-Visual Integrated Management Platform Remote Configuration File Handler Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4535 <br> <strong>Published : </strong> May 11, 2025, 8:15 a.m. | 20 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4535"> read more </a> </article> <hr> <article> <h3> CVE-2025-4533 - JeecgBoot Document Library Upload Remote Resource Consumption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4533 <br> <strong>Published : </strong> May 11, 2025, 7:15 a.m. | 20 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4533"> read more </a> </article> <hr> <article> <h3> CVE-2025-4531 - Seeyon Zhiyuan OA Web Application System Remote Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4531 <br> <strong>Published : </strong> May 11, 2025, 6:15 a.m. | 20 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4531"> read more </a> </article> <hr> <article> <h3> CVE-2025-4532 - Shanghai Bairui Information Technology SunloginClient DLL Search Path Vulnerability (Uncontrolled Search Path) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4532 <br> <strong>Published : </strong> May 11, 2025, 6:15 a.m. | 20 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunlogin_guard.exe. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4532"> read more </a> </article> <hr> <article> <h3> CVE-2025-4530 - Feng Ha Ha Megagao SSM-ERP/Production SSM Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4530 <br> <strong>Published : </strong> May 11, 2025, 5:15 a.m. | 21 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4530"> read more </a> </article> <hr> <article> <h3> CVE-2025-4529 - Seeyon Zhiyuan OA Web Application System Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4529 <br> <strong>Published : </strong> May 11, 2025, 4:15 a.m. | 20 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\WEB-INF\lib\seeyon-apps-m3.jar!\com\seeyon\apps\m3\core\controller\M3CoreController.class of the component ZIP File Handler. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4529"> read more </a> </article> <hr> <article> <h3> CVE-2025-4528 - Dígitro NGC Explorer Remote Session Expiration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4528 <br> <strong>Published : </strong> May 11, 2025, 3:15 a.m. | 21 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Dígitro NGC Explorer up to 3.44.15 and classified as problematic. This issue affects some unknown processing. The manipulation leads to session expiration. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4528"> read more </a> </article> <hr> <article> <h3> CVE-2025-47828 - Lumi H5P Nodejs Library HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47828 <br> <strong>Published : </strong> May 11, 2025, 3:15 a.m. | 19 hours, 40 minutes ago <br> <strong>Description : </strong>Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47828"> read more </a> </article> <hr> <article> <h3> CVE-2025-4527 - Dígitro NGC Explorer Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4527 <br> <strong>Published : </strong> May 11, 2025, 3:15 a.m. | 19 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Dígitro NGC Explorer 3.44.15 and classified as problematic. This vulnerability affects unknown code of the component Password Transmission Handler. The manipulation leads to client-side enforcement of server-side security. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4527"> read more </a> </article> <hr> <article> <h3> CVE-2025-4526 - Dígitro NGC Explorer Password Field Masking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4526 <br> <strong>Published : </strong> May 11, 2025, 1:15 a.m. | 21 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Dígitro NGC Explorer 3.44.15. This affects an unknown part of the component Configuration Page. The manipulation leads to missing password field masking. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 11 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4526"> read more </a> </article> <hr> <article> <h3> CVE-2025-4525 - Discord WINSTA.dll Uncontrolled Search Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4525 <br> <strong>Published : </strong> May 10, 2025, 11:15 p.m. | 22 hours, 25 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4525"> read more </a> </article> <hr> <article> <h3> CVE-2025-47817 - BlueWave Checkmate Role Parameter Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47817 <br> <strong>Published : </strong> May 10, 2025, 10:15 p.m. | 23 hours, 26 minutes ago <br> <strong>Description : </strong>In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47817"> read more </a> </article> <hr> <article> <h3> CVE-2025-47816 - GNU PSPP XML Processing Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47816 <br> <strong>Published : </strong> May 10, 2025, 10:15 p.m. | 22 hours, 40 minutes ago <br> <strong>Description : </strong>libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47816"> read more </a> </article> <hr> <article> <h3> CVE-2025-47814 - GNU PSPP Zip-Reader Heap-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-47814 <br> <strong>Published : </strong> May 10, 2025, 10:15 p.m. | 20 hours, 40 minutes ago <br> <strong>Description : </strong>libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47814"> read more </a> </article> <hr> <article> <h3> CVE-2025-47815 - GNU PSPP Heap-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47815 <br> <strong>Published : </strong> May 10, 2025, 10:15 p.m. | 20 hours, 40 minutes ago <br> <strong>Description : </strong>libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47815"> read more </a> </article> <hr> <article> <h3> CVE-2025-4515 - Zylon PrivateGPT Cross-Domain Policy Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4515 <br> <strong>Published : </strong> May 10, 2025, 9:15 p.m. | 21 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4515"> read more </a> </article> <hr> <article> <h3> CVE-2025-4513 - Moodle Catalyst User Key Authentication Plugin Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4513 <br> <strong>Published : </strong> May 10, 2025, 8:15 p.m. | 20 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Affected by this vulnerability is an unknown functionality of the file /auth/userkey/logout.php of the component Logout. The manipulation of the argument return leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4513"> read more </a> </article> <hr> <article> <h3> CVE-2025-4514 - Zhengzhou Jiuhua Electronic Technology mayicms SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4514 <br> <strong>Published : </strong> May 10, 2025, 8:15 p.m. | 20 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4514"> read more </a> </article> <hr> <article> <h3> CVE-2025-4511 - Vector4Wang Spring-Boot-Quick Remote Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4511 <br> <strong>Published : </strong> May 10, 2025, 7:15 p.m. | 20 hours, 25 minutes ago <br> <strong>Description : </strong>A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4511"> read more </a> </article> <hr> <article> <h3> CVE-2025-4512 - Inetum IODAS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4512 <br> <strong>Published : </strong> May 10, 2025, 7:15 p.m. | 20 hours, 25 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4512"> read more </a> </article> <hr> <article> <h3> CVE-2025-4509 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4509 <br> <strong>Published : </strong> May 10, 2025, 6:15 p.m. | 16 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4509"> read more </a> </article> <hr> <article> <h3> CVE-2025-4510 - Changjietong UFIDA CRM SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4510 <br> <strong>Published : </strong> May 10, 2025, 6:15 p.m. | 16 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4510"> read more </a> </article> <hr> <article> <h3> CVE-2025-4507 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4507 <br> <strong>Published : </strong> May 10, 2025, 5:15 p.m. | 15 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4507"> read more </a> </article> <hr> <article> <h3> CVE-2025-4508 - PHPGurukul e-Diary Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4508 <br> <strong>Published : </strong> May 10, 2025, 5:15 p.m. | 15 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4508"> read more </a> </article> <hr> <article> <h3> CVE-2025-4505 - "PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4505 <br> <strong>Published : </strong> May 10, 2025, 4:15 p.m. | 15 hours, 25 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4505"> read more </a> </article> <hr> <article> <h3> CVE-2025-4506 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4506 <br> <strong>Published : </strong> May 10, 2025, 4:15 p.m. | 15 hours, 25 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1_price leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4506"> read more </a> </article> <hr> <article> <h3> CVE-2023-53145 - Qualcomm Bluetooth BTSdio Use After Free Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2023-53145 <br> <strong>Published : </strong> May 10, 2025, 3:15 p.m. | 15 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdio_probe, the data->work is bound with btsdio_work. It will be started in btsdio_send_frame. If the btsdio_remove runs with a unfinished work, there may be a race condition that hdev is freed but used in btsdio_work. Fix it by canceling the work before do cleanup in btsdio_remove. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53145"> read more </a> </article> <hr> <article> <h3> CVE-2025-4504 - SourceCodester Online College Library System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4504 <br> <strong>Published : </strong> May 10, 2025, 3:15 p.m. | 15 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4504"> read more </a> </article> <hr> <article> <h3> CVE-2025-4503 - Campcodes Sales and Inventory System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4503 <br> <strong>Published : </strong> May 10, 2025, 2:15 p.m. | 16 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4503"> read more </a> </article> <hr> <article> <h3> CVE-2025-4502 - Campcodes Sales and Inventory System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4502 <br> <strong>Published : </strong> May 10, 2025, 2:15 p.m. | 14 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4502"> read more </a> </article> <hr> <article> <h3> CVE-2025-1752 - Llama Index Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1752 <br> <strong>Published : </strong> May 10, 2025, 2:15 p.m. | 13 hours, 56 minutes ago <br> <strong>Description : </strong>A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1752"> read more </a> </article> <hr> <article> <h3> CVE-2025-4500 - Code-projects Hotel Management System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4500 <br> <strong>Published : </strong> May 10, 2025, 1:15 p.m. | 13 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4500"> read more </a> </article> <hr> <article> <h3> CVE-2025-4501 - Apache Code-Projects Album Management System Stack Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4501 <br> <strong>Published : </strong> May 10, 2025, 1:15 p.m. | 13 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4501"> read more </a> </article> <hr> <article> <h3> CVE-2025-4499 - Simple Hospital Management System Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4499 <br> <strong>Published : </strong> May 10, 2025, 12:15 p.m. | 14 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of the component Add Information. The manipulation of the argument x[i].name/x[i].disease leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4499"> read more </a> </article> <hr> <article> <h3> CVE-2025-3878 - WooCommerce Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3878 <br> <strong>Published : </strong> May 10, 2025, 12:15 p.m. | 12 hours, 40 minutes ago <br> <strong>Description : </strong>The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_verify shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3878"> read more </a> </article> <hr> <article> <h3> CVE-2025-3876 - WooCommerce WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3876 <br> <strong>Published : </strong> May 10, 2025, 12:15 p.m. | 9 hours, 56 minutes ago <br> <strong>Description : </strong>The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, and including, 3.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impersonate any account by supplying its username or email and elevate their privileges to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3876"> read more </a> </article> <hr> <article> <h3> CVE-2025-2158 - WordPress Review Plugin Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2158 <br> <strong>Published : </strong> May 10, 2025, 10:15 a.m. | 11 hours, 56 minutes ago <br> <strong>Description : </strong>The WordPress Review Plugin: The Ultimate Solution for Building a Review Website plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.3.5 via the Post custom fields. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP file types can be uploaded and included, or pearcmd is enabled on a server with register_argc_argv also enabled. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2158"> read more </a> </article> <hr> <article> <h3> CVE-2025-4498 - Simple Bus Reservation System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4498 <br> <strong>Published : </strong> May 10, 2025, 10:15 a.m. | 11 hours, 56 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4498"> read more </a> </article> <hr> <article> <h3> CVE-2025-4497 - Apache Code-Projects Simple Banking System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4497 <br> <strong>Published : </strong> May 10, 2025, 7:15 a.m. | 14 hours, 55 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the component Sign In. The manipulation of the argument password2 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4497"> read more </a> </article> <hr> <article> <h3> CVE-2025-2944 - Elementor Jeg Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-2944 <br> <strong>Published : </strong> May 10, 2025, 6:15 a.m. | 15 hours, 55 minutes ago <br> <strong>Description : </strong>The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button and Countdown Widgets in all versions up to, and including, 2.6.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2944"> read more </a> </article> <hr> <article> <h3> CVE-2025-4496 - TOTOLINK CloudACMunualUpdate Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4496 <br> <strong>Published : </strong> May 10, 2025, 5:15 a.m. | 15 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4496"> read more </a> </article> <hr> <article> <h3> CVE-2025-47769 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47769 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 16 hours, 53 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47769"> read more </a> </article> <hr> <article> <h3> CVE-2025-47770 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-47770 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 16 hours, 53 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47770"> read more </a> </article> <hr> <article> <h3> CVE-2025-47767 - Adobe Flash Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47767 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 15 hours, 25 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47767"> read more </a> </article> <hr> <article> <h3> CVE-2025-47768 - Cisco ASA SSL/TLS Certificate Pinning Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47768 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 15 hours, 25 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47768"> read more </a> </article> <hr> <article> <h3> CVE-2025-47765 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47765 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 14 hours, 52 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47765"> read more </a> </article> <hr> <article> <h3> CVE-2025-47766 - Apache Apache HTTP Server Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-47766 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 14 hours, 52 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47766"> read more </a> </article> <hr> <article> <h3> CVE-2025-1137 - IBM Storage Scale Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1137 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 12 hours, 52 minutes ago <br> <strong>Description : </strong>IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1137"> read more </a> </article> <hr> <article> <h3> CVE-2025-47762 - Apple iOS Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-47762 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 12 hours, 52 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47762"> read more </a> </article> <hr> <article> <h3> CVE-2025-47763 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47763 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 12 hours, 52 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47763"> read more </a> </article> <hr> <article> <h3> CVE-2025-47764 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47764 <br> <strong>Published : </strong> May 10, 2025, 3:15 a.m. | 12 hours, 52 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47764"> read more </a> </article> <hr> <article> <h3> CVE-2025-4495 - JAdmin-JAVA Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4495 <br> <strong>Published : </strong> May 10, 2025, 1:15 a.m. | 13 hours, 23 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 10 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4495"> read more </a> </article> <hr> <article> <h3> CVE-2025-47424 - Retool Host Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47424 <br> <strong>Published : </strong> May 9, 2025, 11:15 p.m. | 15 hours, 23 minutes ago <br> <strong>Description : </strong>Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47424"> read more </a> </article> <hr> <article> <h3> CVE-2025-3794 - WordPress WPForms Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3794 <br> <strong>Published : </strong> May 9, 2025, 11:15 p.m. | 14 hours, 51 minutes ago <br> <strong>Description : </strong>The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the start_timestamp parameter in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3794"> read more </a> </article> <hr> <article> <h3> CVE-2025-4492 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4492 <br> <strong>Published : </strong> May 9, 2025, 10:15 p.m. | 15 hours, 52 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticket_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4492"> read more </a> </article> <hr> <article> <h3> CVE-2025-4494 - JAdmin-JAVA Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4494 <br> <strong>Published : </strong> May 9, 2025, 10:15 p.m. | 15 hours, 52 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4494"> read more </a> </article> <hr> <article> <h3> CVE-2025-4490 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4490 <br> <strong>Published : </strong> May 9, 2025, 9:15 p.m. | 15 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4490"> read more </a> </article> <hr> <article> <h3> CVE-2025-4491 - Campcodes Online Food Ordering System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4491 <br> <strong>Published : </strong> May 9, 2025, 9:15 p.m. | 15 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticket_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4491"> read more </a> </article> <hr> <article> <h3> CVE-2025-47269 - Code-server Proxy Pathway Token Exfiltration </h3> <p> <strong>CVE ID : </strong>CVE-2025-47269 <br> <strong>Published : </strong> May 9, 2025, 9:15 p.m. | 14 hours, 23 minutes ago <br> <strong>Description : </strong>code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL `https://<code-server>/proxy/test@evil.com/path` would be proxied to `test@evil.com/path` where the attacker could exfiltrate a user's session token. Any user who runs code-server with the built-in proxy enabled and clicks on maliciously crafted links that go to their code-server instances with reference to /proxy. Normally this is used to proxy local ports, however the URL can reference the attacker's domain instead, and the connection is then proxied to that domain, which will include sending cookies. With access to the session cookie, the attacker can then log into code-server and have full access to the machine hosting code-server as the user running code-server. This issue has been patched in version 4.99.4. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47269"> read more </a> </article> <hr> <article> <h3> CVE-2025-4447 - Eclipse OpenJ9 OpenJDK Stack Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4447 <br> <strong>Published : </strong> May 9, 2025, 9:15 p.m. | 14 hours, 23 minutes ago <br> <strong>Description : </strong>In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4447"> read more </a> </article> <hr> <article> <h3> CVE-2025-4489 - Campcodes Online Food Ordering System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4489 <br> <strong>Published : </strong> May 9, 2025, 9:15 p.m. | 14 hours, 23 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1_verified leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4489"> read more </a> </article> <hr> <article> <h3> CVE-2025-4487 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4487 <br> <strong>Published : </strong> May 9, 2025, 8:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4487"> read more </a> </article> <hr> <article> <h3> CVE-2025-4488 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4488 <br> <strong>Published : </strong> May 9, 2025, 8:15 p.m. | 13 hours, 40 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4488"> read more </a> </article> <hr> <article> <h3> CVE-2025-4486 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4486 <br> <strong>Published : </strong> May 9, 2025, 8:15 p.m. | 10 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4486"> read more </a> </article> <hr> <article> <h3> CVE-2025-4485 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4485 <br> <strong>Published : </strong> May 9, 2025, 7:16 p.m. | 10 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4485"> read more </a> </article> <hr> <article> <h3> CVE-2025-4484 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4484 <br> <strong>Published : </strong> May 9, 2025, 7:16 p.m. | 9 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4484"> read more </a> </article> <hr> <article> <h3> CVE-2025-1993 - IBM App Connect Enterprise Certified Container Cryptographic Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-1993 <br> <strong>Published : </strong> May 9, 2025, 6:16 p.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1993"> read more </a> </article> <hr> <article> <h3> CVE-2025-4482 - Project Worlds Student Project Allocation System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4482 <br> <strong>Published : </strong> May 9, 2025, 6:16 p.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown functionality of the file /change_pass/forgot_password_sql.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4482"> read more </a> </article> <hr> <article> <h3> CVE-2025-4483 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4483 <br> <strong>Published : </strong> May 9, 2025, 6:16 p.m. | 7 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4483"> read more </a> </article> <hr> <article> <h3> CVE-2025-1278 - GitLab IP Access Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1278 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1278"> read more </a> </article> <hr> <article> <h3> CVE-2025-29509 - Jan Electron RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-29509 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>Jan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a rendered link in the conversation, due to opening external website in the app and the exposure of electronAPI, with a lack of filtering of URL when calling shell.openExternal(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29509"> read more </a> </article> <hr> <article> <h3> CVE-2025-46190 - SourceCodester Client Database Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46190 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46190"> read more </a> </article> <hr> <article> <h3> CVE-2025-46191 - SourceCodester Client Database Management System Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46191 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attackers can upload executable PHP files to a web-accessible directory (/files/). This allows them to execute arbitrary commands remotely by accessing the uploaded script, resulting in full Remote Code Execution (RCE) without authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46191"> read more </a> </article> <hr> <article> <h3> CVE-2025-46192 - SourceCodester Client Database Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46192 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46192"> read more </a> </article> <hr> <article> <h3> CVE-2025-4480 - Apache Code-Projects Simple College Management System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4480 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4480"> read more </a> </article> <hr> <article> <h3> CVE-2025-4481 - SourceCodester Apartment Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4481 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 8 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4481"> read more </a> </article> <hr> <article> <h3> CVE-2025-0549 - GitLab OAuth Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0549 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 7 hours, 39 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through minimal user interaction. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0549"> read more </a> </article> <hr> <article> <h3> CVE-2024-8973 - GitLab GitHub Import Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-8973 <br> <strong>Published : </strong> May 9, 2025, 5:15 p.m. | 5 hours, 39 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-8973"> read more </a> </article> <hr> <article> <h3> CVE-2025-4432 - Rust Ring QUIC Panic Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4432 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 6 hours, 39 minutes ago <br> <strong>Description : </strong>A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 2**32 packets sent or received. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4432"> read more </a> </article> <hr> <article> <h3> CVE-2025-46189 - SourceCodester Client Database Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46189 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46189"> read more </a> </article> <hr> <article> <h3> CVE-2025-46193 - SourceCodester Client Database Management System Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46193 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46193"> read more </a> </article> <hr> <article> <h3> CVE-2025-28201 - Victure RX1800 Root RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-28201 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28201"> read more </a> </article> <hr> <article> <h3> CVE-2025-28202 - Victure RX1800 SSH/Telnet Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28202 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28202"> read more </a> </article> <hr> <article> <h3> CVE-2025-28203 - Victure RX1800 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28203 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28203"> read more </a> </article> <hr> <article> <h3> CVE-2025-45513 - Tenda FH451 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45513 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45513"> read more </a> </article> <hr> <article> <h3> CVE-2025-46188 - SourceCodester Client Database Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46188 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46188"> read more </a> </article> <hr> <article> <h3> CVE-2024-13962 - Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13962 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13962"> read more </a> </article> <hr> <article> <h3> CVE-2024-9524 - Avira Prime Link Following Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9524 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9524"> read more </a> </article> <hr> <article> <h3> CVE-2025-28200 - Victure RX1800 Default Password Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-28200 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28200"> read more </a> </article> <hr> <article> <h3> CVE-2024-13960 - AVG TuneUp Link Following Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-13960 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 2 hours, 25 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13960"> read more </a> </article> <hr> <article> <h3> CVE-2024-13961 - Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-13961 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 2 hours, 25 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13961"> read more </a> </article> <hr> <article> <h3> CVE-2024-13759 - Avira Prime Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-13759 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 1 hour, 47 minutes ago <br> <strong>Description : </strong>Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13759"> read more </a> </article> <hr> <article> <h3> CVE-2024-13944 - Norton Utilities Ultimate Link Following Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13944 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 1 hour, 47 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13944"> read more </a> </article> <hr> <article> <h3> CVE-2024-13959 - AVG TuneUp Link Following Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13959 <br> <strong>Published : </strong> May 9, 2025, 4:15 p.m. | 1 hour, 47 minutes ago <br> <strong>Description : </strong>Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13959"> read more </a> </article> <hr> <article> <h3> CVE-2025-45887 - Yifang CMS SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45887 <br> <strong>Published : </strong> May 9, 2025, 3:15 p.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45887"> read more </a> </article> <hr> <article> <h3> CVE-2024-11861 - EnerSys AMPA Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11861 <br> <strong>Published : </strong> May 9, 2025, 2:15 p.m. | 2 hours, 16 minutes ago <br> <strong>Description : </strong>EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11861"> read more </a> </article> <hr> <article> <h3> CVE-2024-12442 - EnerSys AMPA Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12442 <br> <strong>Published : </strong> May 9, 2025, 2:15 p.m. | 2 hours, 16 minutes ago <br> <strong>Description : </strong>EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12442"> read more </a> </article> <hr> <article> <h3> CVE-2025-45885 - PHPGURUKUL Vehicle Parking Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45885 <br> <strong>Published : </strong> May 9, 2025, 2:15 p.m. | 2 hours, 16 minutes ago <br> <strong>Description : </strong>PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45885"> read more </a> </article> <hr> <article> <h3> CVE-2025-1087 - Kong Insomnia Desktop Application Template Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1087 <br> <strong>Published : </strong> May 9, 2025, 12:15 p.m. | 4 hours, 16 minutes ago <br> <strong>Description : </strong>Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1087"> read more </a> </article> <hr> <article> <h3> CVE-2025-3528 - OpenShift Mirror Registry Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3528 <br> <strong>Published : </strong> May 9, 2025, 12:15 p.m. | 4 hours, 16 minutes ago <br> <strong>Description : </strong>A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3528"> read more </a> </article> <hr> <article> <h3> CVE-2025-3897 - "WordPress EUCookieLaw Plugin Arbitrary File Read Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3897 <br> <strong>Published : </strong> May 9, 2025, 12:15 p.m. | 4 hours, 16 minutes ago <br> <strong>Description : </strong>The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 via the 'file_get_contents' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The vulnerability can only be exploited if a caching plugin such as W3 Total Cache is installed and activated. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3897"> read more </a> </article> <hr> <article> <h3> CVE-2025-4206 - Groundhogg WordPress File Deletion Vulnerability (Arbitrary File Deletion) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4206 <br> <strong>Published : </strong> May 9, 2025, 12:15 p.m. | 4 hours, 16 minutes ago <br> <strong>Description : </strong>The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'process_export_delete' and 'process_import_delete' functions in all versions up to, and including, 4.1.1.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4206"> read more </a> </article> <hr> <article> <h3> CVE-2025-4382 - GRUB TPM Auto- decryption Data Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4382 <br> <strong>Published : </strong> May 9, 2025, 12:15 p.m. | 4 hours, 16 minutes ago <br> <strong>Description : </strong>A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption. When GRUB is set to automatically decrypt disks using keys stored in the TPM, it reads the decryption key into system memory. If an attacker with physical access can corrupt the underlying filesystem superblock, GRUB will fail to locate a valid filesystem and enter rescue mode. At this point, the disk is already decrypted, and the decryption key remains loaded in system memory. This scenario may allow an attacker with physical access to access the unencrypted data without any further authentication, thereby compromising data confidentiality. Furthermore, the ability to force this state through filesystem corruption also presents a data integrity concern. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4382"> read more </a> </article> <hr> <article> <h3> CVE-2025-46392 - Apache Commons Configuration Uncontrolled Resource Consumption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46392 <br> <strong>Published : </strong> May 9, 2025, 10:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuration team does not intend to fix these issues in 1.x. Apache Commons Configuration 1.x is still safe to use in scenario's where you only load trusted configurations. Users that load untrusted configurations or give attackers control over usage patterns are recommended to upgrade to the 2.x version line, which fixes these issues. Apache Commons Configuration 2.x is not a drop-in replacement, but as it uses a separate Maven groupId and Java package namespace they can be loaded side-by-side, making it possible to do a gradual migration. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46392"> read more </a> </article> <hr> <article> <h3> CVE-2025-3949 - SeedProd Theme Builder Landing Page Builder Unauthorized Data Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3949 <br> <strong>Published : </strong> May 9, 2025, 9:15 a.m. | 6 hours, 46 minutes ago <br> <strong>Description : </strong>The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'seedprod_lite_get_revisisons' function in all versions up to, and including, 6.18.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the content of arbitrary landing page revisions. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3949"> read more </a> </article> <hr> <article> <h3> CVE-2025-4403 - WooCommerce Drag and Drop Multiple File Upload Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4403 <br> <strong>Published : </strong> May 9, 2025, 9:15 a.m. | 6 hours, 46 minutes ago <br> <strong>Description : </strong>The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.1.6 due to accepting a user‐supplied supported_type string and the uploaded filename without enforcing real extension or MIME checks within the upload() function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4403"> read more </a> </article> <hr> <article> <h3> CVE-2025-4471 - Apache Code-projects Jewelery Store Management System Stack Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4471 <br> <strong>Published : </strong> May 9, 2025, 8:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown functionality of the component Search Item View. The manipulation of the argument str2 leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4471"> read more </a> </article> <hr> <article> <h3> CVE-2025-4472 - Code-projects Departmental Store Management System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4472 <br> <strong>Published : </strong> May 9, 2025, 8:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4472"> read more </a> </article> <hr> <article> <h3> CVE-2025-37885 - KVM Linux Kernel MSI Route Handling Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37885 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU. The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37885"> read more </a> </article> <hr> <article> <h3> CVE-2025-37886 - Linux Kernel PDS Core Use-After-Free Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-37886 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than a stack variable that goes away after pdsc_adminq_post() is done so that the context is still available after the wait loop has given up. There was a case where a slow development firmware caused the adminq request to time out, but then later the FW finally finished the request and sent the interrupt. The handler tried to complete_all() the completion context that had been created on the stack in pdsc_adminq_post() but no longer existed. This caused bad pointer usage, kernel crashes, and much wailing and gnashing of teeth. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37886"> read more </a> </article> <hr> <article> <h3> CVE-2025-37887 - Linux Kernel PDS_CORE Devlink Command Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-37887 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result If the FW doesn't support the PDS_CORE_CMD_FW_CONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink command. This happens because the stack variable fw_list is not 0 initialized which results in fw_list.num_fw_slots being a garbage value from the stack. Then the driver tries to access fw_list.fw_names[i] with i >= ARRAY_SIZE and runs off the end of the array. Fix this by initializing the fw_list and by not failing completely if the devcmd fails because other useful information is printed via devlink dev info even if the devcmd fails. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37887"> read more </a> </article> <hr> <article> <h3> CVE-2025-37888 - Intel Mellanox Linux Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37888 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer dereference. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37888"> read more </a> </article> <hr> <article> <h3> CVE-2025-37889 - XEN PCI MSI NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37889 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends The conversion of the XEN specific global variable pci_msi_ignore_mask to a MSI domain flag, missed the facts that: 1) Legacy architectures do not provide a interrupt domain 2) Parent MSI domains do not necessarily have a domain info attached Both cases result in an unconditional NULL pointer dereference. This was unfortunatly missed in review and testing revealed it late. Cure this by using the existing pci_msi_domain_supports() helper, which handles all possible cases correctly. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37889"> read more </a> </article> <hr> <article> <h3> CVE-2025-3455 - WordPress 1 Click Migration Plugin Remote File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3455 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'start_restore' function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3455"> read more </a> </article> <hr> <article> <h3> CVE-2025-3605 - WordPress Frontend Login and Registration Blocks Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3605 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.7. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the flr_blocks_user_settings_handle_ajax_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3605"> read more </a> </article> <hr> <article> <h3> CVE-2025-4467 - SourceCodester Online Student Clearance System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4467 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4467"> read more </a> </article> <hr> <article> <h3> CVE-2025-4468 - SourceCodester Online Student Clearance System File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4468 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4468"> read more </a> </article> <hr> <article> <h3> CVE-2025-4469 - SourceCodester Online Student Clearance System Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4469 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4469"> read more </a> </article> <hr> <article> <h3> CVE-2025-4470 - SourceCodester Online Student Clearance System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4470 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 8 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4470"> read more </a> </article> <hr> <article> <h3> CVE-2025-37884 - Linux Kernel BPF Event Mutex Deadlock </h3> <p> <strong>CVE ID : </strong>CVE-2025-37884 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 7 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex. Fix the following deadlock: CPU A _free_event() perf_kprobe_destroy() mutex_lock(&event_mutex) perf_trace_event_unreg() synchronize_rcu_tasks_trace() There are several paths where _free_event() grabs event_mutex and calls sync_rcu_tasks_trace. Above is one such case. CPU B bpf_prog_test_run_syscall() rcu_read_lock_trace() bpf_prog_run_pin_on_cpu() bpf_prog_load() bpf_tracing_func_proto() trace_set_clr_event() mutex_lock(&event_mutex) Delegate trace_set_clr_event() to workqueue to avoid such lock dependency. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37884"> read more </a> </article> <hr> <article> <h3> CVE-2025-37881 - Aspeed USB Gadget NULL Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-37881 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, returned by devm_kasprintf(), could be NULL. A pointer check is added to prevent potential NULL pointer dereference. This is similar to the fix in commit 3027e7b15b02 ("ice: Fix some null pointer dereference issues in ice_ptp.c"). This issue is found by our static analysis tool <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37881"> read more </a> </article> <hr> <article> <h3> CVE-2025-37882 - Linux Kernel USB xHCI Isochronous Ring Handling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37882 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event, a new TD may be queued at this ring position. I can trigger this race by rising interrupt moderation to increase IRQ handling delay. Similar delay may occur naturally due to system load. If this ever happens after a Missed Service Error, missed TDs will be skipped and the new TD processed as if it matched the event. It could be given back prematurely, risking data loss or buffer UAF by the xHC. Don't complete TDs on xrun events and don't warn if queued TDs don't match the event's TRB pointer, which can be NULL or a link/no-op TRB. Don't warn if there are no queued TDs at all. Now that it's safe, also handle xrun events if the skip flag is clear. This ensures completion of any TD stuck in 'error mid TD' state right before the xrun event, which could happen if a driver submits a finite number of URBs to a buggy HC and then an error occurs on the last TD. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37882"> read more </a> </article> <hr> <article> <h3> CVE-2025-37883 - IBM s390 Linux Kernel Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37883 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 6 hours, 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_init() to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper to do the free job. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37883"> read more </a> </article> <hr> <article> <h3> CVE-2025-37876 - Linux NetFS NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37876 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CONFIG_NETFS_SUPPORTS=y CONFIG_PROC_FS=n The system crashes with something like: [ 3.766197] ------------[ cut here ]------------ [ 3.766484] kernel BUG at mm/mempool.c:560! [ 3.766789] Oops: invalid opcode: 0000 [#1] SMP NOPTI [ 3.767123] CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W [ 3.767777] Tainted: [W]=WARN [ 3.767968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), [ 3.768523] RIP: 0010:mempool_alloc_slab.cold+0x17/0x19 [ 3.768847] Code: 50 fe ff 58 5b 5d 41 5c 41 5d 41 5e 41 5f e9 93 95 13 00 [ 3.769977] RSP: 0018:ffffc90000013998 EFLAGS: 00010286 [ 3.770315] RAX: 000000000000002f RBX: ffff888100ba8640 RCX: 0000000000000000 [ 3.770749] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000ffffffff [ 3.771217] RBP: 0000000000092880 R08: 0000000000000000 R09: ffffc90000013828 [ 3.771664] R10: 0000000000000001 R11: 00000000ffffffea R12: 0000000000092cc0 [ 3.772117] R13: 0000000000000400 R14: ffff8881004b1620 R15: ffffea0004ef7e40 [ 3.772554] FS: 0000000000000000(0000) GS:ffff8881b5f3c000(0000) knlGS:0000000000000000 [ 3.773061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3.773443] CR2: ffffffff830901b4 CR3: 0000000004296001 CR4: 0000000000770ef0 [ 3.773884] PKRU: 55555554 [ 3.774058] Call Trace: [ 3.774232] <TASK> [ 3.774371] mempool_alloc_noprof+0x6a/0x190 [ 3.774649] ? _printk+0x57/0x80 [ 3.774862] netfs_alloc_request+0x85/0x2ce [ 3.775147] netfs_readahead+0x28/0x170 [ 3.775395] read_pages+0x6c/0x350 [ 3.775623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.775928] page_cache_ra_unbounded+0x1bd/0x2a0 [ 3.776247] filemap_get_pages+0x139/0x970 [ 3.776510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.776820] filemap_read+0xf9/0x580 [ 3.777054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.777368] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.777674] ? find_held_lock+0x32/0x90 [ 3.777929] ? netfs_start_io_read+0x19/0x70 [ 3.778221] ? netfs_start_io_read+0x19/0x70 [ 3.778489] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.778800] ? lock_acquired+0x1e6/0x450 [ 3.779054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3.779379] netfs_buffered_read_iter+0x57/0x80 [ 3.779670] __kernel_read+0x158/0x2c0 [ 3.779927] bprm_execve+0x300/0x7a0 [ 3.780185] kernel_execve+0x10c/0x140 [ 3.780423] ? __pfx_kernel_init+0x10/0x10 [ 3.780690] kernel_init+0xd5/0x150 [ 3.780910] ret_from_fork+0x2d/0x50 [ 3.781156] ? __pfx_kernel_init+0x10/0x10 [ 3.781414] ret_from_fork_asm+0x1a/0x30 [ 3.781677] </TASK> [ 3.781823] Modules linked in: [ 3.782065] ---[ end trace 0000000000000000 ]--- This is caused by the following error path in netfs_init(): if (!proc_mkdir("fs/netfs", NULL)) goto error_proc; Fix this by adding ifdef in netfs_main(), so that /proc/fs/netfs is only created with CONFIG_PROC_FS. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37876"> read more </a> </article> <hr> <article> <h3> CVE-2025-37877 - Linux Kernel IOMMU DMA Cleanup Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37877 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_device_register() encounters an error, it can end up tearing down already-configured groups and default domains, however this currently still leaves devices hooked up to iommu-dma (and even historically the behaviour in this area was at best inconsistent across architectures/drivers...) Although in the case that an IOMMU is present whose driver has failed to probe, users cannot necessarily expect DMA to work anyway, it's still arguable that we should do our best to put things back as if the IOMMU driver was never there at all, and certainly the potential for crashing in iommu-dma itself is undesirable. Make sure we clean up the dev->dma_iommu flag along with everything else. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37877"> read more </a> </article> <hr> <article> <h3> CVE-2025-37878 - Linux Kernel Perf Core Context Assignment Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37878 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init Move the get_ctx(child_ctx) call and the child_event->ctx assignment to occur immediately after the child event is allocated. Ensure that child_event->ctx is non-NULL before any subsequent error path within inherit_event calls free_event(), satisfying the assumptions of the cleanup code. Details: There's no clear Fixes tag, because this bug is a side-effect of multiple interacting commits over time (up to 15 years old), not a single regression. The code initially incremented refcount then assigned context immediately after the child_event was created. Later, an early validity check for child_event was added before the refcount/assignment. Even later, a WARN_ON_ONCE() cleanup check was added, assuming event->ctx is valid if the pmu_ctx is valid. The problem is that the WARN_ON_ONCE() could trigger after the initial check passed but before child_event->ctx was assigned, violating its precondition. The solution is to assign child_event->ctx right after its initial validation. This ensures the context exists for any subsequent checks or cleanup routines, resolving the WARN_ON_ONCE(). To resolve it, defer the refcount update and child_event->ctx assignment directly after child_event->pmu_ctx is set but before checking if the parent event is orphaned. The cleanup routine depends on event->pmu_ctx being non-NULL before it verifies event->ctx is non-NULL. This also maintains the author's original intent of passing in child_ctx to find_get_pmu_context before its refcount/assignment. [ mingo: Expanded the changelog from another email by Gabriel Shahrouzi. ] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37878"> read more </a> </article> <hr> <article> <h3> CVE-2025-37879 - "Linux 9p Client Signed Integer Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37879 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed. Make variables unsigned to avoid this problem. The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37879"> read more </a> </article> <hr> <article> <h3> CVE-2025-37880 - Linux um Time-Travel Scheduling Vulnerability (Deadlock) </h3> <p> <strong>CVE ID : </strong>CVE-2025-37880 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-travel mode sched_yield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace spinlock in ASAN. Unfortunately, with time-travel it causes an extreme slowdown or even deadlock depending on the kernel configuration (CONFIG_UML_MAX_USERSPACE_ITERATIONS). Work around it by accounting time to the process whenever it executes a sched_yield syscall. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37880"> read more </a> </article> <hr> <article> <h3> CVE-2025-37875 - "Ionic Gigabit Controller (igc) PTM Trigger Logic Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37875 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PTM cycle is triggered results in unreliable PTM operation. To fix this, clear the PTM 'trigger' and status after each PTM transaction. The issue can be reproduced with the following: $ sudo phc2sys -R 1000 -O 0 -i tsn0 -m Note: 1000 Hz (-R 1000) is unrealistically large, but provides a way to quickly reproduce the issue. PHC2SYS exits with: "ioctl PTP_OFFSET_PRECISE: Connection timed out" when the PTM transaction fails This patch also fixes a hang in igc_probe() when loading the igc driver in the kdump kernel on systems supporting PTM. The igc driver running in the base kernel enables PTM trigger in igc_probe(). Therefore the driver is always in PTM trigger mode, except in brief periods when manually triggering a PTM cycle. When a crash occurs, the NIC is reset while PTM trigger is enabled. Due to a hardware problem, the NIC is subsequently in a bad busmaster state and doesn't handle register reads/writes. When running igc_probe() in the kdump kernel, the first register access to a NIC register hangs driver probing and ultimately breaks kdump. With this patch, igc has PTM trigger disabled most of the time, and the trigger is only enabled for very brief (10 - 100 us) periods when manually triggering a PTM cycle. Chances that a crash occurs during a PTM trigger are not 0, but extremely reduced. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37875"> read more </a> </article> <hr> <article> <h3> CVE-2025-37873 - "bnxt Ethernet Driver DMA Mapping Error Crash Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37873 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37873"> read more </a> </article> <hr> <article> <h3> CVE-2025-37874 - "Netgear BE Wireless Driver Memory Leak" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37874 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent error paths after ngbe_sw_init() don't free the rss_key. Fix that by freeing it in error path along with wx->mac_table. Also change the label to which execution jumps when ngbe_sw_init() fails, because otherwise, it could lead to a double free for rss_key, when the mac_table allocation fails in wx_sw_init(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37874"> read more </a> </article> <hr> <article> <h3> CVE-2025-37871 - Linux Kernel NFSd Deadlock Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37871 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 44 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_stid following a failed dl_recall queue operation: T1 T2 nfs4_laundromat nfs4_get_client_reaplist nfs4_anylock_blockers __break_lease spin_lock // ctx->flc_lock spin_lock // clp->cl_lock nfs4_lockowner_has_blockers locks_owner_has_blockers spin_lock // flctx->flc_lock nfsd_break_deleg_cb nfsd_break_one_deleg nfs4_put_stid refcount_dec_and_lock spin_lock // clp->cl_lock When a file is opened, an nfs4_delegation is allocated with sc_count initialized to 1, and the file_lease holds a reference to the delegation. The file_lease is then associated with the file through kernel_setlease. The disassociation is performed in nfsd4_delegreturn via the following call chain: nfsd4_delegreturn --> destroy_delegation --> destroy_unhashed_deleg --> nfs4_unlock_deleg_lease --> kernel_setlease --> generic_delete_lease The corresponding sc_count reference will be released after this disassociation. Since nfsd_break_one_deleg executes while holding the flc_lock, the disassociation process becomes blocked when attempting to acquire flc_lock in generic_delete_lease. This means: 1) sc_count in nfsd_break_one_deleg will not be decremented to 0; 2) The nfs4_put_stid called by nfsd_break_one_deleg will not attempt to acquire cl_lock; 3) Consequently, no deadlock condition is created. Given that sc_count in nfsd_break_one_deleg remains non-zero, we can safely perform refcount_dec on sc_count directly. This approach effectively avoids triggering deadlock warnings. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37871"> read more </a> </article> <hr> <article> <h3> CVE-2025-37872 - NetXtreme Gigabit Ethernet (TXGBE) Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37872 <br> <strong>Published : </strong> May 9, 2025, 7:16 a.m. | 44 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbe_probe() error path When txgbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in txgbe_probe() function, the subsequent error paths after txgbe_sw_init() don't free the rss_key. Fix that by freeing it in error path along with wx->mac_table. Also change the label to which execution jumps when txgbe_sw_init() fails, because otherwise, it could lead to a double free for rss_key, when the mac_table allocation fails in wx_sw_init(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 07:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37872"> read more </a> </article> <hr> <article> <h3> CVE-2025-3462 - ASUS DriverHub HTTP Request Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3462 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3462"> read more </a> </article> <hr> <article> <h3> CVE-2025-3463 - "ASUS DriverHub HTTP Request Validation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3463 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3463"> read more </a> </article> <hr> <article> <h3> CVE-2025-4375 - Sparx Systems Pro Cloud Server CSRF Session Hijacking </h3> <p> <strong>CVE ID : </strong>CVE-2025-4375 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affects Pro Cloud Server: earlier than 6.0.165. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4375"> read more </a> </article> <hr> <article> <h3> CVE-2025-4376 - Sparx Systems Pro Cloud Server Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4376 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4376"> read more </a> </article> <hr> <article> <h3> CVE-2025-4377 - Sparx Systems Pro Cloud Server Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-4377 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it allows reading arbitrary files on the filesystem. Logview is accessible on Pro Cloud Server Configuration interface. This issue affects Pro Cloud Server: earlier than 6.0.165. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4377"> read more </a> </article> <hr> <article> <h3> CVE-2025-4464 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4464 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument plan leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4464"> read more </a> </article> <hr> <article> <h3> CVE-2025-4465 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4465 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_schedule. The manipulation of the argument member_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4465"> read more </a> </article> <hr> <article> <h3> CVE-2025-4466 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4466 <br> <strong>Published : </strong> May 9, 2025, 6:15 a.m. | 15 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=save_payment. The manipulation of the argument registration_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4466"> read more </a> </article> <hr> <article> <h3> CVE-2025-47735 - Wgp Rust Lack of Drop Slow Thread Synchronization </h3> <p> <strong>CVE ID : </strong>CVE-2025-47735 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47735"> read more </a> </article> <hr> <article> <h3> CVE-2025-47736 - SQLite3 Parser Invalid UTF-8 Input Crash </h3> <p> <strong>CVE ID : </strong>CVE-2025-47736 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47736"> read more </a> </article> <hr> <article> <h3> CVE-2025-47737 - Trailer lib.rs Zero-Sized Allocation Mishandle </h3> <p> <strong>CVE ID : </strong>CVE-2025-47737 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47737"> read more </a> </article> <hr> <article> <h3> CVE-2025-4461 - TOTOLINK N150RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4461 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4461"> read more </a> </article> <hr> <article> <h3> CVE-2025-4462 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4462 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4462"> read more </a> </article> <hr> <article> <h3> CVE-2025-4463 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4463 <br> <strong>Published : </strong> May 9, 2025, 5:15 a.m. | 1 hour, 15 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_package. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4463"> read more </a> </article> <hr> <article> <h3> CVE-2025-3710 - "KVM Over IP Switch CL5708IM Stack-based Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3710 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3710"> read more </a> </article> <hr> <article> <h3> CVE-2025-3711 - "LCD KVM over IP Switch CL5708IM Stack-based Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3711 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3711"> read more </a> </article> <hr> <article> <h3> CVE-2025-3712 - "LCD KVM over IP Switch CL5708IM Heap-based Buffer Overflow Denial-of-Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3712 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3712"> read more </a> </article> <hr> <article> <h3> CVE-2025-3713 - "LCD KVM over IP Switch CL5708IM Heap-based Buffer Overflow Denial-of-Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3713 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3713"> read more </a> </article> <hr> <article> <h3> CVE-2025-3714 - "LCD KVM over IP Switch CL5708IM Stack-based Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3714 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3714"> read more </a> </article> <hr> <article> <h3> CVE-2025-4456 - Project Worlds Car Rental Project SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4456 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4456"> read more </a> </article> <hr> <article> <h3> CVE-2025-4457 - "Project Worlds Car Rental Project SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4457 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4457"> read more </a> </article> <hr> <article> <h3> CVE-2025-4458 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4458 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_upatient.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4458"> read more </a> </article> <hr> <article> <h3> CVE-2025-4459 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4459 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysis_form.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4459"> read more </a> </article> <hr> <article> <h3> CVE-2025-4460 - TOTOLINK N150RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4460 <br> <strong>Published : </strong> May 9, 2025, 4:16 a.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4460"> read more </a> </article> <hr> <article> <h3> CVE-2025-4455 - Patch My PC Home Updater DLL Search Path Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4455 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 3 hours, 15 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library advapi32.dll/BCrypt.dll/comctl32.dll/crypt32.dll/dwmapi.dll/gdi32.dll/gdiplus.dll/imm32.dll/iphlpapi.dll/kernel32.dll/mscms.dll/msctf.dll/ntdll.dll/ole32.dll/oleaut32.dll/PresentationNative_cor3.dll/secur32.dll/shcore.dll/shell32.dll/sspicli.dll/System.IO. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4455"> read more </a> </article> <hr> <article> <h3> CVE-2025-3810 - WordPress WPBookit Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3810 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the edit_profile_data() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses and passwords, including administrators, and leverage that to gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3810"> read more </a> </article> <hr> <article> <h3> CVE-2025-3811 - WordPress WPBookit Privilege Escalation Account Takeover Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3811 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email through the edit_newdata_customer_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3811"> read more </a> </article> <hr> <article> <h3> CVE-2025-4434 - WordPress Remote Images Grabber Plugin Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4434 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>The Remote Images Grabber plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4434"> read more </a> </article> <hr> <article> <h3> CVE-2025-4453 - D-Link DIR-619L Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4453 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4453"> read more </a> </article> <hr> <article> <h3> CVE-2025-4454 - D-Link DIR-619L Wake_on_Lan Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4454 <br> <strong>Published : </strong> May 9, 2025, 3:15 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4454"> read more </a> </article> <hr> <article> <h3> CVE-2025-4452 - D-Link DIR-619L Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4452 <br> <strong>Published : </strong> May 9, 2025, 2:15 a.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4452"> read more </a> </article> <hr> <article> <h3> CVE-2025-4448 - D-Link DIR-619L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4448 <br> <strong>Published : </strong> May 9, 2025, 1:15 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4448"> read more </a> </article> <hr> <article> <h3> CVE-2025-4449 - D-Link DIR-619L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4449 <br> <strong>Published : </strong> May 9, 2025, 1:15 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4449"> read more </a> </article> <hr> <article> <h3> CVE-2025-4450 - D-Link DIR-619L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4450 <br> <strong>Published : </strong> May 9, 2025, 1:15 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4450"> read more </a> </article> <hr> <article> <h3> CVE-2025-4451 - D-Link DIR-619L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4451 <br> <strong>Published : </strong> May 9, 2025, 1:15 a.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4451"> read more </a> </article> <hr> <article> <h3> CVE-2025-4442 - D-Link DIR-605L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4442 <br> <strong>Published : </strong> May 9, 2025, 12:15 a.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_Wizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4442"> read more </a> </article> <hr> <article> <h3> CVE-2025-4443 - D-Link DIR-605L Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4443 <br> <strong>Published : </strong> May 9, 2025, 12:15 a.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4443"> read more </a> </article> <hr> <article> <h3> CVE-2025-4445 - D-Link DIR-605L Wake-on-LAN Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4445 <br> <strong>Published : </strong> May 9, 2025, 12:15 a.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wake_on_lan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4445"> read more </a> </article> <hr> <article> <h3> CVE-2025-4446 - H3C GR-5400AX Local Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4446 <br> <strong>Published : </strong> May 9, 2025, 12:15 a.m. | 4 hours, 39 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack needs to be approached within the local network. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 09 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4446"> read more </a> </article> <hr> <article> <h3> CVE-2025-29813 - Microsoft Visual Studio Pipeline Job Token Elevation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29813 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully exploited this vulnerability could extend their access to a project. To exploit this vulnerability, an attacker would first have to have access to the project and swap the short-term token for a long-term one. The update addresses the vulnerability by correcting how the Visual Studio updater handles these tokens. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29813"> read more </a> </article> <hr> <article> <h3> CVE-2025-29827 - Azure Automation Unprivileged Elevation of Privilege </h3> <p> <strong>CVE ID : </strong>CVE-2025-29827 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29827"> read more </a> </article> <hr> <article> <h3> CVE-2025-29972 - Azure SSRF Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29972 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Server-Side Request Forgery (SSRF) in Azure allows an authorized attacker to perform spoofing over a network. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29972"> read more </a> </article> <hr> <article> <h3> CVE-2025-31946 - Pixmeo OsiriX MD Local Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31946 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corruption or a system crash. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31946"> read more </a> </article> <hr> <article> <h3> CVE-2025-33072 - Azure Azure Network Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-33072 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Improper access control in Azure allows an unauthorized attacker to disclose information over a network. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33072"> read more </a> </article> <hr> <article> <h3> CVE-2025-47732 - Microsoft Dataverse Remote Code Execution (RCE) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47732 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Microsoft Dataverse Remote Code Execution Vulnerability <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47732"> read more </a> </article> <hr> <article> <h3> CVE-2025-47733 - Microsoft Power Apps SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47733 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47733"> read more </a> </article> <hr> <article> <h3> CVE-2025-4107 - Microsoft Windows SMB Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4107 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4107"> read more </a> </article> <hr> <article> <h3> CVE-2025-4440 - H3C GR-1800AX Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4440 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4440"> read more </a> </article> <hr> <article> <h3> CVE-2025-4441 - D-Link DIR-605L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4441 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 4 hours, 44 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4441"> read more </a> </article> <hr> <article> <h3> CVE-2025-27578 - Pixmeo OsiriX MD Denial-of-Service Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27578 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 3 hours, 15 minutes ago <br> <strong>Description : </strong>Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading to a denial-of-service condition. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27578"> read more </a> </article> <hr> <article> <h3> CVE-2025-27720 - Pixmeo Osirix MD Unencrypted Credential Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-27720 <br> <strong>Published : </strong> May 8, 2025, 11:15 p.m. | 3 hours, 15 minutes ago <br> <strong>Description : </strong>The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27720"> read more </a> </article> <hr> <article> <h3> CVE-2025-1329 - IBM CICS TX DNS Rebinding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1329 <br> <strong>Published : </strong> May 8, 2025, 10:15 p.m. | 4 hours, 15 minutes ago <br> <strong>Description : </strong>IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1329"> read more </a> </article> <hr> <article> <h3> CVE-2025-1330 - IBM CICS TX DNS Code Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-1330 <br> <strong>Published : </strong> May 8, 2025, 10:15 p.m. | 4 hours, 15 minutes ago <br> <strong>Description : </strong>IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1330"> read more </a> </article> <hr> <article> <h3> CVE-2025-1331 - IBM CICS TX Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1331 <br> <strong>Published : </strong> May 8, 2025, 10:15 p.m. | 4 hours, 15 minutes ago <br> <strong>Description : </strong>IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1331"> read more </a> </article> <hr> <article> <h3> CVE-2025-28074 - phpList XSS Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-28074 <br> <strong>Published : </strong> May 8, 2025, 9:15 p.m. | 5 hours, 15 minutes ago <br> <strong>Description : </strong>phpList prior to 3.6.3 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the application dynamically references internal paths and processes untrusted input without escaping, allowing an attacker to inject malicious JavaScript. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28074"> read more </a> </article> <hr> <article> <h3> CVE-2023-31585 - Grocery-CMS-PHP Unauthenticated File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-31585 <br> <strong>Published : </strong> May 8, 2025, 9:15 p.m. | 2 hours, 22 minutes ago <br> <strong>Description : </strong>Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-31585"> read more </a> </article> <hr> <article> <h3> CVE-2025-45790 - TOTOLINK A3100R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45790 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45790"> read more </a> </article> <hr> <article> <h3> CVE-2025-45797 - TOTOlink A950RG Buffer Overflow Vulnerability in NoticeUrl Parameter </h3> <p> <strong>CVE ID : </strong>CVE-2025-45797 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45797"> read more </a> </article> <hr> <article> <h3> CVE-2025-45798 - TOTOLINK A950RG Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45798 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45798"> read more </a> </article> <hr> <article> <h3> CVE-2025-46336 - Rack::Session Pool Session Restoration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46336 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. This issue has been patched in version 2.1.1. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46336"> read more </a> </article> <hr> <article> <h3> CVE-2025-46712 - Erlang/OTP SSH Man-in-the-Middle Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46712 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by allowing optional messages to be exchanged. This allows a Man-in-the-Middle attacker to inject these messages in a connection during the handshake. This issue has been patched in versions OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25). <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46712"> read more </a> </article> <hr> <article> <h3> CVE-2025-46812 - Trix Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46812 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46812"> read more </a> </article> <hr> <article> <h3> CVE-2025-46833 - Apache SimplePythonEncryption RSA Brute Force Decryption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46833 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46833"> read more </a> </article> <hr> <article> <h3> CVE-2025-4475 - Here is a potential title for the vulnerability:"Apache Struts Remote Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4475 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4475"> read more </a> </article> <hr> <article> <h3> CVE-2024-9448 - Arista EOS Traffic Policy Unvalidated Packet Forwarding </h3> <p> <strong>CVE ID : </strong>CVE-2024-9448 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the rule was to drop the packet, the packet will not be dropped and instead will be forwarded as if the rule was not in place. This could lead to packets being delivered to unexpected destinations. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9448"> read more </a> </article> <hr> <article> <h3> CVE-2025-28073 - phpList Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28073 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>phpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. An attacker can inject arbitrary JavaScript code by manipulating the id parameter, which is improperly sanitized. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28073"> read more </a> </article> <hr> <article> <h3> CVE-2025-44023 - D-Link DNS-320 Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44023 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the account_mgr.cgi->cgi_chg_admin_pw components. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44023"> read more </a> </article> <hr> <article> <h3> CVE-2025-45787 - Totolink A3100R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45787 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45787"> read more </a> </article> <hr> <article> <h3> CVE-2025-45788 - TOTOLINK A3100R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45788 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45788"> read more </a> </article> <hr> <article> <h3> CVE-2025-45789 - TOTOLINK A3100R Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45789 <br> <strong>Published : </strong> May 8, 2025, 8:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45789"> read more </a> </article> <hr> <article> <h3> CVE-2024-8100 - Arista CloudVision Portal - Token Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2024-8100 <br> <strong>Published : </strong> May 8, 2025, 7:16 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-8100"> read more </a> </article> <hr> <article> <h3> CVE-2025-0505 - "Arista CloudVision Zero Touch Provisioning Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-0505 <br> <strong>Published : </strong> May 8, 2025, 7:16 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that CloudVision as-a-Service is not affected. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0505"> read more </a> </article> <hr> <article> <h3> CVE-2025-27695 - Dell Wyse Management Suite Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-27695 <br> <strong>Published : </strong> May 8, 2025, 7:16 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27695"> read more </a> </article> <hr> <article> <h3> CVE-2024-11186 - Arista CloudVision Portal Elevated Privilege Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11186 <br> <strong>Published : </strong> May 8, 2025, 7:15 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11186"> read more </a> </article> <hr> <article> <h3> CVE-2024-12378 - Arista EOS Unencrypted VxLAN Tunnel Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2024-12378 <br> <strong>Published : </strong> May 8, 2025, 7:15 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12378"> read more </a> </article> <hr> <article> <h3> CVE-2025-4098 - Horner Automation Cscape Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4098 <br> <strong>Published : </strong> May 8, 2025, 6:15 p.m. | 4 hours, 38 minutes ago <br> <strong>Description : </strong>Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4098"> read more </a> </article> <hr> <article> <h3> CVE-2025-1948 - Jetty HTTP/2 Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-1948 <br> <strong>Published : </strong> May 8, 2025, 6:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE. The Jetty HTTP/2 server does not perform validation on this setting, and tries to allocate a ByteBuffer of the specified capacity to encode HTTP responses, likely resulting in OutOfMemoryError being thrown, or even the JVM process exiting. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1948"> read more </a> </article> <hr> <article> <h3> CVE-2025-30101 - Dell PowerScale OneFS TOCTOU Race Condition Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30101 <br> <strong>Published : </strong> May 8, 2025, 6:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to denial of service and information tampering. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30101"> read more </a> </article> <hr> <article> <h3> CVE-2025-30102 - Dell PowerScale OneFS Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30102 <br> <strong>Published : </strong> May 8, 2025, 6:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to denial of service. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30102"> read more </a> </article> <hr> <article> <h3> CVE-2024-13009 - Eclipse Jetty Gzip Buffer Release Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13009 <br> <strong>Published : </strong> May 8, 2025, 6:15 p.m. | 2 hours, 38 minutes ago <br> <strong>Description : </strong>In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13009"> read more </a> </article> <hr> <article> <h3> CVE-2025-44021 - OpenStack Ironic Unintended File Writing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44021 <br> <strong>Published : </strong> May 8, 2025, 5:16 p.m. | 3 hours, 38 minutes ago <br> <strong>Description : </strong>OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can provide a path to any local file (readable by ironic-conductor), which may then be written to the target node disk. This is difficult to exploit in practice, because a node deployed in this manner should never reach the ACTIVE state, but it still represents a danger in environments running with non-default, insecure configurations such as with automated cleaning disabled. The fixed versions are 24.1.3, 26.1.1, and 29.0.1. <br> <strong>Severity:</strong> 2.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44021"> read more </a> </article> <hr> <article> <h3> CVE-2025-26845 - Znuny Eval Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26845 <br> <strong>Published : </strong> May 8, 2025, 5:16 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26845"> read more </a> </article> <hr> <article> <h3> CVE-2025-26847 - Znuny Support Bundle Password Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26847 <br> <strong>Published : </strong> May 8, 2025, 5:16 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26847"> read more </a> </article> <hr> <article> <h3> CVE-2023-51328 - PHPJabbers Cleaning Business Software Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2023-51328 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c_name, name" parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-51328"> read more </a> </article> <hr> <article> <h3> CVE-2025-26842 - Znuny S/MIME Encryption Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26842 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26842"> read more </a> </article> <hr> <article> <h3> CVE-2025-26844 - Znuny Cookie Without HttpOnly Flag Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26844 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26844"> read more </a> </article> <hr> <article> <h3> CVE-2025-43926 - Znuny Unauthenticated User Preference Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43926 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetching user data via GetUserData, these keys and values are retrieved and given as a whole to other function calls, which then might use these keys/values to affect permissions or other settings. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43926"> read more </a> </article> <hr> <article> <h3> CVE-2025-45841 - TOTOLINK NR1800X Remote Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45841 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45841"> read more </a> </article> <hr> <article> <h3> CVE-2025-45842 - TOTOLINK NR1800X Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45842 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45842"> read more </a> </article> <hr> <article> <h3> CVE-2025-45843 - TOTOLINK NR1800X Router Authenticated Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45843 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45843"> read more </a> </article> <hr> <article> <h3> CVE-2025-45844 - TOTOLINK NR1800X Router Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45844 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45844"> read more </a> </article> <hr> <article> <h3> CVE-2025-45845 - TOTOLINK NR1800X Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45845 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45845"> read more </a> </article> <hr> <article> <h3> CVE-2025-45846 - ALFA AIP-W512 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45846 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45846"> read more </a> </article> <hr> <article> <h3> CVE-2025-45847 - ALFA AIP-W512 Remote Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-45847 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45847"> read more </a> </article> <hr> <article> <h3> CVE-2025-4132 - Rapid7 Corporate Website Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4132 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Rapid7 Corporate Website prior to May 2nd 2025, suffered from a URL Redirection to Untrusted Site ('Open Redirect') vulnerability whereby, due to misconfigured headers, an attacker could successfully redirect users to a malicious site of their control. This vulnerability has been fixed as of May 2nd 2025. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4132"> read more </a> </article> <hr> <article> <h3> CVE-2023-51295 - PHPJabbers Event Booking Calendar HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-51295 <br> <strong>Published : </strong> May 8, 2025, 4:15 p.m. | 2 hours, 15 minutes ago <br> <strong>Description : </strong>PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-51295"> read more </a> </article> <hr> <article> <h3> CVE-2025-45818 - Slims Senayan Library Management Systems SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45818 <br> <strong>Published : </strong> May 8, 2025, 3:15 p.m. | 3 hours, 14 minutes ago <br> <strong>Description : </strong>Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45818"> read more </a> </article> <hr> <article> <h3> CVE-2025-45819 - Slims Senayan Library Management Systems SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45819 <br> <strong>Published : </strong> May 8, 2025, 3:15 p.m. | 3 hours, 14 minutes ago <br> <strong>Description : </strong>Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45819"> read more </a> </article> <hr> <article> <h3> CVE-2025-45820 - Slims Senayan Library Management Systems SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45820 <br> <strong>Published : </strong> May 8, 2025, 3:15 p.m. | 3 hours, 14 minutes ago <br> <strong>Description : </strong>Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45820"> read more </a> </article> <hr> <article> <h3> CVE-2025-4207 - PostgreSQL Buffer Over-Read Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-4207 <br> <strong>Published : </strong> May 8, 2025, 3:15 p.m. | 3 hours, 14 minutes ago <br> <strong>Description : </strong>Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4207"> read more </a> </article> <hr> <article> <h3> CVE-2025-47729 - TeleMessage End-to-End Encryption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47729 <br> <strong>Published : </strong> May 8, 2025, 2:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025. <br> <strong>Severity:</strong> 1.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47729"> read more </a> </article> <hr> <article> <h3> CVE-2025-47730 - TeleMessage API Authentication Token Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47730 <br> <strong>Published : </strong> May 8, 2025, 2:15 p.m. | 3 hours, 42 minutes ago <br> <strong>Description : </strong>The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47730"> read more </a> </article> <hr> <article> <h3> CVE-2024-6648 - AP Page Builder Path Traversal RCE </h3> <p> <strong>CVE ID : </strong>CVE-2024-6648 <br> <strong>Published : </strong> May 8, 2025, 1:15 p.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6648"> read more </a> </article> <hr> <article> <h3> CVE-2025-3862 - Contest Gallery WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3862 <br> <strong>Published : </strong> May 8, 2025, 12:15 p.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3862"> read more </a> </article> <hr> <article> <h3> CVE-2025-4208 - NEX-Forms PHP Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4208 <br> <strong>Published : </strong> May 8, 2025, 12:15 p.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Limited Code Execution in all versions up to, and including, 8.9.1 via the get_table_records function. This is due to the unsanitized use of user-supplied input in call_user_func(). This makes it possible for authenticated attackers, with Custom-level access, to execute arbitrary PHP functions that meet specific constraints (static methods or global functions accepting a single array parameter). <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4208"> read more </a> </article> <hr> <article> <h3> CVE-2025-2806 - TagDiv Composer WordPress Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2806 <br> <strong>Published : </strong> May 8, 2025, 12:15 p.m. | 4 hours, 38 minutes ago <br> <strong>Description : </strong>The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and including, 5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2806"> read more </a> </article> <hr> <article> <h3> CVE-2025-3468 - NEX-Forms Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3468 <br> <strong>Published : </strong> May 8, 2025, 12:15 p.m. | 4 hours, 38 minutes ago <br> <strong>Description : </strong>The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the clean_html and form_fields parameters in all versions up to, and including, 8.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3468"> read more </a> </article> <hr> <article> <h3> CVE-2025-3506 - Checkmk Unauthenticated File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3506 <br> <strong>Published : </strong> May 8, 2025, 12:15 p.m. | 4 hours, 38 minutes ago <br> <strong>Description : </strong>Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that could contain secrets. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3506"> read more </a> </article> <hr> <article> <h3> CVE-2025-3758 - WF2220 Information Disclosure in Western Digital Router </h3> <p> <strong>CVE ID : </strong>CVE-2025-3758 <br> <strong>Published : </strong> May 8, 2025, 10:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3758"> read more </a> </article> <hr> <article> <h3> CVE-2025-3759 - Netgear IGD Unauthenticated Configuration Change Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3759 <br> <strong>Published : </strong> May 8, 2025, 10:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>Endpoint /cgi-bin-igd/netcore_set.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3759"> read more </a> </article> <hr> <article> <h3> CVE-2025-41450 - Danfoss AK-SM 8xxA Series Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-41450 <br> <strong>Published : </strong> May 8, 2025, 10:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2 <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41450"> read more </a> </article> <hr> <article> <h3> CVE-2025-1252 - RTI Connext Professional Heap-based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1252 <br> <strong>Published : </strong> May 8, 2025, 9:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 4.4 before 6.1.2.23. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1252"> read more </a> </article> <hr> <article> <h3> CVE-2025-1253 - RTI Connext Professional Classic Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-1253 <br> <strong>Published : </strong> May 8, 2025, 9:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 4.5 before 6.1.2.23. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1253"> read more </a> </article> <hr> <article> <h3> CVE-2025-1254 - RTI Connext Professional Core Libraries Out-of-bounds Read/Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1254 <br> <strong>Published : </strong> May 8, 2025, 9:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers, Overflow Buffers.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.0.0 before 6.1.2.23. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1254"> read more </a> </article> <hr> <article> <h3> CVE-2025-40846 - Halo Open Redirect and Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40846 <br> <strong>Published : </strong> May 8, 2025, 9:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing attackers to redirect users to malicious websites (Open Redirect) and inject JavaScript code to perform cross site scripting attack. The vulnerability affects Halo versions up to 2.174.101 and all versions between 2.175.1 and 2.184.21 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40846"> read more </a> </article> <hr> <article> <h3> CVE-2025-37830 - Linux Kernel cpufreq scmi Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37830 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference. Add NULL check after cpufreq_cpu_get_raw() to prevent this issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37830"> read more </a> </article> <hr> <article> <h3> CVE-2025-37831 - Apple Soc cpufreq Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-37831 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37831"> read more </a> </article> <hr> <article> <h3> CVE-2025-37832 - Allwinner cpufreq sun50i Linux Kernel Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37832 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: cpufreq: sun50i: prevent out-of-bounds access A KASAN enabled kernel reports an out-of-bounds access when handling the nvmem cell in the sun50i cpufreq driver: ================================================================== BUG: KASAN: slab-out-of-bounds in sun50i_cpufreq_nvmem_probe+0x180/0x3d4 Read of size 4 at addr ffff000006bf31e0 by task kworker/u16:1/38 This is because the DT specifies the nvmem cell as covering only two bytes, but we use a u32 pointer to read the value. DTs for other SoCs indeed specify 4 bytes, so we cannot just shorten the variable to a u16. Fortunately nvmem_cell_read() allows to return the length of the nvmem cell, in bytes, so we can use that information to only access the valid portion of the data. To cover multiple cell sizes, use memcpy() to copy the information into a zeroed u32 buffer, then also make sure we always read the data in little endian fashion, as this is how the data is stored in the SID efuses. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37832"> read more </a> </article> <hr> <article> <h3> CVE-2025-37833 - Linux Niu PCI-MSIX Touch Entry Data Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37833 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix() to not cause a fatal trap on sparc systems. Set PCI_DEV_FLAGS_MSIX_TOUCH_ENTRY_DATA_FIRST on the struct pci_dev to work around a bug in the hardware or firmware. For each vector entry in the msix table, niu chips will cause a fatal trap if any registers in that entry are read before that entries' ENTRY_DATA register is written to. Testing indicates writes to other registers are not sufficient to prevent the fatal trap, however the value does not appear to matter. This only needs to happen once after power up, so simply rebooting into a kernel lacking this fix will NOT cause the trap. NON-RESUMABLE ERROR: Reporting on cpu 64 NON-RESUMABLE ERROR: TPC [0x00000000005f6900] <msix_prepare_msi_desc+0x90/0xa0> NON-RESUMABLE ERROR: RAW [4010000000000016:00000e37f93e32ff:0000000202000080:ffffffffffffffff NON-RESUMABLE ERROR: 0000000800000000:0000000000000000:0000000000000000:0000000000000000] NON-RESUMABLE ERROR: handle [0x4010000000000016] stick [0x00000e37f93e32ff] NON-RESUMABLE ERROR: type [precise nonresumable] NON-RESUMABLE ERROR: attrs [0x02000080] < ASI sp-faulted priv > NON-RESUMABLE ERROR: raddr [0xffffffffffffffff] NON-RESUMABLE ERROR: insn effective address [0x000000c50020000c] NON-RESUMABLE ERROR: size [0x8] NON-RESUMABLE ERROR: asi [0x00] CPU: 64 UID: 0 PID: 745 Comm: kworker/64:1 Not tainted 6.11.5 #63 Workqueue: events work_for_cpu_fn TSTATE: 0000000011001602 TPC: 00000000005f6900 TNPC: 00000000005f6904 Y: 00000000 Not tainted TPC: <msix_prepare_msi_desc+0x90/0xa0> g0: 00000000000002e9 g1: 000000000000000c g2: 000000c50020000c g3: 0000000000000100 g4: ffff8000470307c0 g5: ffff800fec5be000 g6: ffff800047a08000 g7: 0000000000000000 o0: ffff800014feb000 o1: ffff800047a0b620 o2: 0000000000000011 o3: ffff800047a0b620 o4: 0000000000000080 o5: 0000000000000011 sp: ffff800047a0ad51 ret_pc: 00000000005f7128 RPC: <__pci_enable_msix_range+0x3cc/0x460> l0: 000000000000000d l1: 000000000000c01f l2: ffff800014feb0a8 l3: 0000000000000020 l4: 000000000000c000 l5: 0000000000000001 l6: 0000000020000000 l7: ffff800047a0b734 i0: ffff800014feb000 i1: ffff800047a0b730 i2: 0000000000000001 i3: 000000000000000d i4: 0000000000000000 i5: 0000000000000000 i6: ffff800047a0ae81 i7: 00000000101888b0 I7: <niu_try_msix.constprop.0+0xc0/0x130 [niu]> Call Trace: [<00000000101888b0>] niu_try_msix.constprop.0+0xc0/0x130 [niu] [<000000001018f840>] niu_get_invariants+0x183c/0x207c [niu] [<00000000101902fc>] niu_pci_init_one+0x27c/0x2fc [niu] [<00000000005ef3e4>] local_pci_probe+0x28/0x74 [<0000000000469240>] work_for_cpu_fn+0x8/0x1c [<000000000046b008>] process_scheduled_works+0x144/0x210 [<000000000046b518>] worker_thread+0x13c/0x1c0 [<00000000004710e0>] kthread+0xb8/0xc8 [<00000000004060c8>] ret_from_fork+0x1c/0x2c [<0000000000000000>] 0x0 Kernel panic - not syncing: Non-resumable error. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37833"> read more </a> </article> <hr> <article> <h3> CVE-2025-37834 - Linux Kernel: Dirty Swapcache Page Reclamation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37834 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd000 Memory failure: 0x18b00e: dirty swapcache page still referenced by 2 users Memory failure: 0x18b00e: recovery action for dirty swapcache page: Failed page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x20ffd pfn:0x18b00e memcg:ffff0000dd6d9000 anon flags: 0x5ffffe00482011(locked|dirty|arch_1|swapbacked|hwpoison|node=0|zone=2|lastcpupid=0xfffff) raw: 005ffffe00482011 dead000000000100 dead000000000122 ffff0000e232a7c9 raw: 0000000000020ffd 0000000000000000 00000002ffffffff ffff0000dd6d9000 page dumped because: VM_BUG_ON_FOLIO(!folio_test_uptodate(folio)) ------------[ cut here ]------------ kernel BUG at mm/swap_state.c:184! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 PID: 60 Comm: kswapd0 Not tainted 6.6.0-gcb097e7de84e #3 Hardware name: linux,dummy-virt (DT) pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : add_to_swap+0xbc/0x158 lr : add_to_swap+0xbc/0x158 sp : ffff800087f37340 x29: ffff800087f37340 x28: fffffc00052c0380 x27: ffff800087f37780 x26: ffff800087f37490 x25: ffff800087f37c78 x24: ffff800087f377a0 x23: ffff800087f37c50 x22: 0000000000000000 x21: fffffc00052c03b4 x20: 0000000000000000 x19: fffffc00052c0380 x18: 0000000000000000 x17: 296f696c6f662865 x16: 7461646f7470755f x15: 747365745f6f696c x14: 6f6621284f494c4f x13: 0000000000000001 x12: ffff600036d8b97b x11: 1fffe00036d8b97a x10: ffff600036d8b97a x9 : dfff800000000000 x8 : 00009fffc9274686 x7 : ffff0001b6c5cbd3 x6 : 0000000000000001 x5 : ffff0000c25896c0 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff0000c25896c0 x0 : 0000000000000000 Call trace: add_to_swap+0xbc/0x158 shrink_folio_list+0x12ac/0x2648 shrink_inactive_list+0x318/0x948 shrink_lruvec+0x450/0x720 shrink_node_memcgs+0x280/0x4a8 shrink_node+0x128/0x978 balance_pgdat+0x4f0/0xb20 kswapd+0x228/0x438 kthread+0x214/0x230 ret_from_fork+0x10/0x20 I can reproduce this issue with the following steps: 1) When a dirty swapcache page is isolated by reclaim process and the page isn't locked, inject memory failure for the page. me_swapcache_dirty() clears uptodate flag and tries to delete from lru, but fails. Reclaim process will put the hwpoisoned page back to lru. 2) The process that maps the hwpoisoned page exits, the page is deleted the page will never be freed and will be in the lru forever. 3) If we trigger a reclaim again and tries to reclaim the page, add_to_swap() will trigger VM_BUG_ON_FOLIO due to the uptodate flag is cleared. To fix it, skip the hwpoisoned page in shrink_folio_list(). Besides, the hwpoison folio may not be unmapped by hwpoison_user_mappings() yet, unmap it in shrink_folio_list(), otherwise the folio will fail to be unmaped by hwpoison_user_mappings() since the folio isn't in lru list. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37834"> read more </a> </article> <hr> <article> <h3> CVE-2025-4127 - "WP SEO Structured Data Schema Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4127 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 8 hours, 41 minutes ago <br> <strong>Description : </strong>The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts that will execute whenever an administrator accesses the plugin settings page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4127"> read more </a> </article> <hr> <article> <h3> CVE-2025-37826 - Linux Kernel UFS SCSI Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37826 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 7 hours, 14 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() Add a NULL check for the returned hwq pointer by ufshcd_mcq_req_to_hwq(). This is similar to the fix in commit 74736103fb41 ("scsi: ufs: core: Fix ufshcd_abort_one racing issue"). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37826"> read more </a> </article> <hr> <article> <h3> CVE-2025-37827 - Here is a title for the vulnerability:"btrfs: RAID1 Profile Write Pointer Offset Mismatch NULL Pointer Dereference" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37827 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 7 hours, 14 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug report about a NULL pointer dereference in __btrfs_add_free_space_zoned() that ultimately happens because a conversion from the default metadata profile DUP to a RAID1 profile on two disks. The stack trace has the following signature: BTRFS error (device sdc): zoned: write pointer offset mismatch of zones in raid1 profile BUG: kernel NULL pointer dereference, address: 0000000000000058 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:__btrfs_add_free_space_zoned.isra.0+0x61/0x1a0 RSP: 0018:ffffa236b6f3f6d0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff96c8132f3400 RCX: 0000000000000001 RDX: 0000000010000000 RSI: 0000000000000000 RDI: ffff96c8132f3410 RBP: 0000000010000000 R08: 0000000000000003 R09: 0000000000000000 R10: 0000000000000000 R11: 00000000ffffffff R12: 0000000000000000 R13: ffff96c758f65a40 R14: 0000000000000001 R15: 000011aac0000000 FS: 00007fdab1cb2900(0000) GS:ffff96e60ca00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000058 CR3: 00000001a05ae000 CR4: 0000000000350ef0 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15c/0x2f0 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? __btrfs_add_free_space_zoned.isra.0+0x61/0x1a0 btrfs_add_free_space_async_trimmed+0x34/0x40 btrfs_add_new_free_space+0x107/0x120 btrfs_make_block_group+0x104/0x2b0 btrfs_create_chunk+0x977/0xf20 btrfs_chunk_alloc+0x174/0x510 ? srso_return_thunk+0x5/0x5f btrfs_inc_block_group_ro+0x1b1/0x230 btrfs_relocate_block_group+0x9e/0x410 btrfs_relocate_chunk+0x3f/0x130 btrfs_balance+0x8ac/0x12b0 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? __kmalloc_cache_noprof+0x14c/0x3e0 btrfs_ioctl+0x2686/0x2a80 ? srso_return_thunk+0x5/0x5f ? ioctl_has_perm.constprop.0.isra.0+0xd2/0x120 __x64_sys_ioctl+0x97/0xc0 do_syscall_64+0x82/0x160 ? srso_return_thunk+0x5/0x5f ? __memcg_slab_free_hook+0x11a/0x170 ? srso_return_thunk+0x5/0x5f ? kmem_cache_free+0x3f0/0x450 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? syscall_exit_to_user_mode+0x10/0x210 ? srso_return_thunk+0x5/0x5f ? do_syscall_64+0x8e/0x160 ? sysfs_emit+0xaf/0xc0 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? seq_read_iter+0x207/0x460 ? srso_return_thunk+0x5/0x5f ? vfs_read+0x29c/0x370 ? srso_return_thunk+0x5/0x5f ? srso_return_thunk+0x5/0x5f ? syscall_exit_to_user_mode+0x10/0x210 ? srso_return_thunk+0x5/0x5f ? do_syscall_64+0x8e/0x160 ? srso_return_thunk+0x5/0x5f ? exc_page_fault+0x7e/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fdab1e0ca6d RSP: 002b:00007ffeb2b60c80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdab1e0ca6d RDX: 00007ffeb2b60d80 RSI: 00000000c4009420 RDI: 0000000000000003 RBP: 00007ffeb2b60cd0 R08: 0000000000000000 R09: 0000000000000013 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffeb2b6343b R14: 00007ffeb2b60d80 R15: 0000000000000001 </TASK> CR2: 0000000000000058 ---[ end trace 0000000000000000 ]--- The 1st line is the most interesting here: BTRFS error (device sdc): zoned: write pointer offset mismatch of zones in raid1 profile When a RAID1 block-group is created and a write pointer mismatch between the disks in the RAID set is detected, btrfs sets the alloc_offset to the length of the block group marking it as full. Afterwards the code expects that a balance operation will evacuate the data in this block-group and repair the problems. But before this is possible, the new space of this block-group will be accounted in the free space cache. But in __btrfs_ ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37827"> read more </a> </article> <hr> <article> <h3> CVE-2025-37828 - "ufs Linux Kernel NULL Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37828 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 7 hours, 14 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() A race can occur between the MCQ completion path and the abort handler: once a request completes, __blk_mq_free_request() sets rq->mq_hctx to NULL, meaning the subsequent ufshcd_mcq_req_to_hwq() call in ufshcd_mcq_abort() can return a NULL pointer. If this NULL pointer is dereferenced, the kernel will crash. Add a NULL check for the returned hwq pointer. If hwq is NULL, log an error and return FAILED, preventing a potential NULL-pointer dereference. As suggested by Bart, the ufshcd_cmd_inflight() check is removed. This is similar to the fix in commit 74736103fb41 ("scsi: ufs: core: Fix ufshcd_abort_one racing issue"). This is found by our static analysis tool KNighter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37828"> read more </a> </article> <hr> <article> <h3> CVE-2025-37829 - "Linux cpufreq: NULL Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37829 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 7 hours, 14 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this case, which results in a NULL pointer dereference. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37829"> read more </a> </article> <hr> <article> <h3> CVE-2025-37824 - Linux Kernel Tipc NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37824 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 3 UID: 0 PID: 6017 Comm: kworker/3:5 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events tipc_net_finalize_work RIP: 0010:tipc_mon_reinit_self+0x11c/0x210 net/tipc/monitor.c:719 ... RSP: 0018:ffffc9000356fb68 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000003ee87cba RDX: 0000000000000000 RSI: ffffffff8dbc56a7 RDI: ffff88804c2cc010 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000007 R13: fffffbfff2111097 R14: ffff88804ead8000 R15: ffff88804ead9010 FS: 0000000000000000(0000) GS:ffff888097ab9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f720eb00 CR3: 000000000e182000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tipc_net_finalize+0x10b/0x180 net/tipc/net.c:140 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> ... RIP: 0010:tipc_mon_reinit_self+0x11c/0x210 net/tipc/monitor.c:719 ... RSP: 0018:ffffc9000356fb68 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000003ee87cba RDX: 0000000000000000 RSI: ffffffff8dbc56a7 RDI: ffff88804c2cc010 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000007 R13: fffffbfff2111097 R14: ffff88804ead8000 R15: ffff88804ead9010 FS: 0000000000000000(0000) GS:ffff888097ab9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000f720eb00 CR3: 000000000e182000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 There is a racing condition between workqueue created when enabling bearer and another thread created when disabling bearer right after that as follow: enabling_bearer | disabling_bearer --------------- | ---------------- tipc_disc_timeout() | { | bearer_disable() ... | { schedule_work(&tn->work); | tipc_mon_delete() ... | { } | ... | write_lock_bh(&mon->lock); | mon->self = NULL; | write_unlock_bh(&mon->lock); | ... | } tipc_net_finalize_work() | } { | ... | tipc_net_finalize() | { | ... | tipc_mon_reinit_self() | { | ... | write_lock_bh(&mon->lock); | mon->self->addr = tipc_own_addr(net); | write_unlock_bh(&mon->lock); | ... ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37824"> read more </a> </article> <hr> <article> <h3> CVE-2025-37825 - "Nvidia Nvmet Out-of-Bounds Access Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37825 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 6 hours, 41 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmet_enable_port When trying to enable a port that has no transport configured yet, nvmet_enable_port() uses NVMF_TRTYPE_MAX (255) to query the transports array, causing an out-of-bounds access: [ 106.058694] BUG: KASAN: global-out-of-bounds in nvmet_enable_port+0x42/0x1da [ 106.058719] Read of size 8 at addr ffffffff89dafa58 by task ln/632 [...] [ 106.076026] nvmet: transport type 255 not supported Since commit 200adac75888, NVMF_TRTYPE_MAX is the default state as configured by nvmet_ports_make(). Avoid this by checking for NVMF_TRTYPE_MAX before proceeding. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37825"> read more </a> </article> <hr> <article> <h3> CVE-2025-37823 - Linux Kernel Net-Sched HFSC Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37823 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37823"> read more </a> </article> <hr> <article> <h3> CVE-2025-37818 - LoongArch Linux Kernel Invalid PMD Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37818 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArch's huge_pte_offset() currently returns a pointer to a PMD slot even if the underlying entry points to invalid_pte_table (indicating no mapping). Callers like smaps_hugetlb_range() fetch this invalid entry value (the address of invalid_pte_table) via this pointer. The generic is_swap_pte() check then incorrectly identifies this address as a swap entry on LoongArch, because it satisfies the "!pte_present() && !pte_none()" conditions. This misinterpretation, combined with a coincidental match by is_migration_entry() on the address bits, leads to kernel crashes in pfn_swap_entry_to_page(). Fix this at the architecture level by modifying huge_pte_offset() to check the PMD entry's content using pmd_none() before returning. If the entry is invalid (i.e., it points to invalid_pte_table), return NULL instead of the pointer to the slot. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37818"> read more </a> </article> <hr> <article> <h3> CVE-2025-37819 - "Linux Kernel GICv2m Use After Free Vulnerability in irqchip" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37819 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may get invoked at runtime during a PCI host bridge probe. But, the call back is wrongly marked as __init, causing it to be freed, while being registered with the PCI subsystem and could trigger: Unable to handle kernel paging request at virtual address ffff8000816c0400 gicv2m_get_fwnode+0x0/0x58 (P) pci_set_bus_msi_domain+0x74/0x88 pci_register_host_bridge+0x194/0x548 This is easily reproducible on a Juno board with ACPI boot. Retain the function for later use. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37819"> read more </a> </article> <hr> <article> <h3> CVE-2025-37820 - Xen-netfront NULL Pointer Dereference and Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37820 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constraints, internal errors, or invalid data. Failing to check for NULL may lead to a NULL pointer dereference if the result is used later in processing, potentially causing crashes, data corruption, or undefined behavior. On XDP redirect failure, the associated page must be released explicitly if it was previously retained via get_page(). Failing to do so may result in a memory leak, as the pages reference count is not decremented. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37820"> read more </a> </article> <hr> <article> <h3> CVE-2025-37821 - Linux Kernel Sched Eevdf Crash </h3> <p> <strong>CVE ID : </strong>CVE-2025-37821 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash There is a code path in dequeue_entities() that can set the slice of a sched_entity to U64_MAX, which sometimes results in a crash. The offending case is when dequeue_entities() is called to dequeue a delayed group entity, and then the entity's parent's dequeue is delayed. In that case: 1. In the if (entity_is_task(se)) else block at the beginning of dequeue_entities(), slice is set to cfs_rq_min_slice(group_cfs_rq(se)). If the entity was delayed, then it has no queued tasks, so cfs_rq_min_slice() returns U64_MAX. 2. The first for_each_sched_entity() loop dequeues the entity. 3. If the entity was its parent's only child, then the next iteration tries to dequeue the parent. 4. If the parent's dequeue needs to be delayed, then it breaks from the first for_each_sched_entity() loop _without updating slice_. 5. The second for_each_sched_entity() loop sets the parent's ->slice to the saved slice, which is still U64_MAX. This throws off subsequent calculations with potentially catastrophic results. A manifestation we saw in production was: 6. In update_entity_lag(), se->slice is used to calculate limit, which ends up as a huge negative number. 7. limit is used in se->vlag = clamp(vlag, -limit, limit). Because limit is negative, vlag > limit, so se->vlag is set to the same huge negative number. 8. In place_entity(), se->vlag is scaled, which overflows and results in another huge (positive or negative) number. 9. The adjusted lag is subtracted from se->vruntime, which increases or decreases se->vruntime by a huge number. 10. pick_eevdf() calls entity_eligible()/vruntime_eligible(), which incorrectly returns false because the vruntime is so far from the other vruntimes on the queue, causing the (vruntime - cfs_rq->min_vruntime) * load calulation to overflow. 11. Nothing appears to be eligible, so pick_eevdf() returns NULL. 12. pick_next_entity() tries to dereference the return value of pick_eevdf() and crashes. Dumping the cfs_rq states from the core dumps with drgn showed tell-tale huge vruntime ranges and bogus vlag values, and I also traced se->slice being set to U64_MAX on live systems (which was usually "benign" since the rest of the runqueue needed to be in a particular state to crash). Fix it in dequeue_entities() by always setting slice from the first non-empty cfs_rq. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37821"> read more </a> </article> <hr> <article> <h3> CVE-2025-37822 - RISC-V Linux Kernel Uprobes Fence Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37822 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The XOL (execute out-of-line) buffer is used to single-step the replaced instruction(s) for uprobes. The RISC-V port was missing a proper fence.i (i$ flushing) after constructing the XOL buffer, which can result in incorrect execution of stale/broken instructions. This was found running the BPF selftests "test_progs: uprobe_autoattach, attach_probe" on the Spacemit K1/X60, where the uprobes tests randomly blew up. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37822"> read more </a> </article> <hr> <article> <h3> CVE-2025-37815 - "Microchip PCI1xxxx Linux Kernel IRQ Handler Registration Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37815 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the generated IRQ. This is done by acquiring the spinlock and storing the current interrupt state before handling the interrupt request using generic_handle_irq. A previous fix patch was submitted where 'generic_handle_irq' was replaced with 'handle_nested_irq'. However, this change also causes the kernel panic where after determining which GPIO triggered the interrupt and attempting to call handle_nested_irq with the mapped IRQ number, leads to a failure in locating the registered handler. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37815"> read more </a> </article> <hr> <article> <h3> CVE-2025-37816 - Linux Kernel Mei VSC Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37816 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid counted_by() use gcc 15 honors the __counted_by(len) attribute on vsc_tp_packet.buf[] and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it contains the actual packet length *without* the crc. So as soon as vsc_tp_xfer() tries to add the crc to buf[] the fortify-panic handler gets triggered: [ 80.842193] memcpy: detected buffer overflow: 4 byte write of buffer size 0 [ 80.842243] WARNING: CPU: 4 PID: 272 at lib/string_helpers.c:1032 __fortify_report+0x45/0x50 ... [ 80.843175] __fortify_panic+0x9/0xb [ 80.843186] vsc_tp_xfer.cold+0x67/0x67 [mei_vsc_hw] [ 80.843210] ? seqcount_lockdep_reader_access.constprop.0+0x82/0x90 [ 80.843229] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.843250] mei_vsc_hw_start+0x98/0x120 [mei_vsc] [ 80.843270] mei_reset+0x11d/0x420 [mei] The easiest fix would be to just drop the counted-by but with the exception of the ack buffer in vsc_tp_xfer_helper() which only contains enough room for the packet-header, all other uses of vsc_tp_packet always use a buffer of VSC_TP_MAX_XFER_SIZE bytes for the packet. Instead of just dropping the counted-by, split the vsc_tp_packet struct definition into a header and a full-packet definition and use a fixed size buf[] in the packet definition, this way fortify-source buffer overrun checking still works when enabled. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37816"> read more </a> </article> <hr> <article> <h3> CVE-2025-37817 - Linux kernel Double Free in Chameleon Driver </h3> <p> <strong>CVE ID : </strong>CVE-2025-37817 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 2 hours, 40 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Thus, goto 'err' label and free 'mdev' again causes a double free. Just return if mcb_device_register() fails. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37817"> read more </a> </article> <hr> <article> <h3> CVE-2025-37811 - "Qualcomm Chipidea USB Driver Null Pointer Dereference" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37811 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 1 hour, 12 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optional device property so it is totally valid for the corresponding data->usbmisc_data to have a NULL value. Check that before dereferencing the pointer. Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37811"> read more </a> </article> <hr> <article> <h3> CVE-2025-37812 - Linux Kernel USB cdns3 NCM Gadget Deadlock </h3> <p> <strong>CVE ID : </strong>CVE-2025-37812 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 1 hour, 12 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 ("usb: cdnsp: Fix deadlock issue during using NCM gadget"). Under PREEMPT_RT the deadlock can be readily triggered by heavy network traffic, for example using "iperf --bidir" over NCM ethernet link. The deadlock occurs because the threaded interrupt handler gets preempted by a softirq, but both are protected by the same spinlock. Prevent deadlock by disabling softirq during threaded irq handler. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37812"> read more </a> </article> <hr> <article> <h3> CVE-2025-37813 - Etron USB XHCI Invalid Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37813 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 1 hour, 12 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before prepare_transfer() and prepare_ring(), so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of times this code is called. Then enqueue + 1 is an invalid pointer. It will crash the kernel right away or load some junk which may look like a link TRB and cause the real link TRB to be replaced with a NOOP. This wouldn't end well. Use a functionally equivalent test which doesn't dereference the pointer and always gives correct result. Something has crashed my machine twice in recent days while playing with an Etron HC, and a control transfer stress test ran for confirmation has just crashed it again. The same test passes with this patch applied. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37813"> read more </a> </article> <hr> <article> <h3> CVE-2025-37814 - Linux Kernel TTY Mouse Reporting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37814 <br> <strong>Published : </strong> May 8, 2025, 7:15 a.m. | 1 hour, 12 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT This requirement was overeagerly loosened in commit 2f83e38a095f ("tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN"), but as it turns out, (1) the logic I implemented there was inconsistent (apologies!), (2) TIOCL_SELMOUSEREPORT might actually be a small security risk after all, and (3) TIOCL_SELMOUSEREPORT is only meant to be used by the mouse daemon (GPM or Consolation), which runs as CAP_SYS_ADMIN already. In more detail: 1. The previous patch has inconsistent logic: In commit 2f83e38a095f ("tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN"), we checked for sel_mode == TIOCL_SELMOUSEREPORT, but overlooked that the lower four bits of this "mode" parameter were actually used as an additional way to pass an argument. So the patch did actually still require CAP_SYS_ADMIN, if any of the mouse button bits are set, but did not require it if none of the mouse buttons bits are set. This logic is inconsistent and was not intentional. We should have the same policies for using TIOCL_SELMOUSEREPORT independent of the value of the "hidden" mouse button argument. I sent a separate documentation patch to the man page list with more details on TIOCL_SELMOUSEREPORT: https://lore.kernel.org/all/20250223091342.35523-2-gnoack3000@gmail.com/ 2. TIOCL_SELMOUSEREPORT is indeed a potential security risk which can let an attacker simulate "keyboard" input to command line applications on the same terminal, like TIOCSTI and some other TIOCLINUX "selection mode" IOCTLs. By enabling mouse reporting on a terminal and then injecting mouse reports through TIOCL_SELMOUSEREPORT, an attacker can simulate mouse movements on the same terminal, similar to the TIOCSTI keystroke injection attacks that were previously possible with TIOCSTI and other TIOCL_SETSEL selection modes. Many programs (including libreadline/bash) are then prone to misinterpret these mouse reports as normal keyboard input because they do not expect input in the X11 mouse protocol form. The attacker does not have complete control over the escape sequence, but they can at least control the values of two consecutive bytes in the binary mouse reporting escape sequence. I went into more detail on that in the discussion at https://lore.kernel.org/all/20250221.0a947528d8f3@gnoack.org/ It is not equally trivial to simulate arbitrary keystrokes as it was with TIOCSTI (commit 83efeeeb3d04 ("tty: Allow TIOCSTI to be disabled")), but the general mechanism is there, and together with the small number of existing legit use cases (see below), it would be better to revert back to requiring CAP_SYS_ADMIN for TIOCL_SELMOUSEREPORT, as it was already the case before commit 2f83e38a095f ("tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN"). 3. TIOCL_SELMOUSEREPORT is only used by the mouse daemons (GPM or Consolation), and they are the only legit use case: To quote console_codes(4): The mouse tracking facility is intended to return xterm(1)-compatible mouse status reports. Because the console driver has no way to know the device or type of the mouse, these reports are returned in the console input stream only when the virtual terminal driver receives a mouse update ioctl. These ioctls must be generated by a mouse-aware user-mode application such as the gpm(8) daemon. Jared Finder has also confirmed in https://lore.kernel.org/all/491f3df9de6593df8e70dbe77614b026@finder.org/ that Emacs does not call TIOCL_SELMOUSEREPORT directly, and it would be difficult to find good reasons for doing that, given that it would interfere with the reports that GPM is sending. More information on the interaction between GPM, terminals and th ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37814"> read more </a> </article> <hr> <article> <h3> CVE-2024-13793 - Walmart | WooCommerce Theme WordPress Shortcode Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13793 <br> <strong>Published : </strong> May 8, 2025, 5:15 a.m. | 40 minutes ago <br> <strong>Description : </strong>The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.8.11. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13793"> read more </a> </article> <hr> <article> <h3> CVE-2025-32873 - Django Slow Denial-of-Service Vulnerability in HTML Tag Processing </h3> <p> <strong>CVE ID : </strong>CVE-2025-32873 <br> <strong>Published : </strong> May 8, 2025, 4:17 a.m. | 1 hour, 39 minutes ago <br> <strong>Description : </strong>An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTML tags. The template filter striptags is also vulnerable, because it is built on top of strip_tags(). <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 04:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32873"> read more </a> </article> <hr> <article> <h3> CVE-2024-55651 - i-Educar Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-55651 <br> <strong>Published : </strong> May 8, 2025, 12:15 a.m. | 5 hours, 41 minutes ago <br> <strong>Description : </strong>i-Educar is free, fully online school management software. Version 2.9 of the application fails to properly validate and sanitize user supplied input, leading to a stored cross-site scripting vulnerability that resides within the user type (Tipo de Usuário) input field. Through this attacker vector a malicious user might be able to retrieve information belonging to another user, which may lead to sensitive information leakage or other malicious actions. As of time of publication, no patched versions are known to exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 08 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55651"> read more </a> </article> <hr> <article> <h3> CVE-2025-0936 - Arista EOS gNMI Remote Credentials Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-0936 <br> <strong>Published : </strong> May 7, 2025, 11:15 p.m. | 6 hours, 40 minutes ago <br> <strong>Description : </strong>On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc). <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0936"> read more </a> </article> <hr> <article> <h3> CVE-2025-32441 - Rack Session Pool Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32441 <br> <strong>Published : </strong> May 7, 2025, 11:15 p.m. | 6 hours, 40 minutes ago <br> <strong>Description : </strong>Rack is a modular Ruby web server interface. Prior to version 2.2.14, when using the `Rack::Session::Pool` middleware, simultaneous rack requests can restore a deleted rack session, which allows the unauthenticated user to occupy that session. Rack session middleware prepares the session at the beginning of request, then saves is back to the store with possible changes applied by host rack application. This way the session becomes to be a subject of race conditions in general sense over concurrent rack requests. When using the `Rack::Session::Pool` middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. Version 2.2.14 contains a patch for the issue. Some other mitigations are available. Either ensure the application invalidates sessions atomically by marking them as logged out e.g., using a `logged_out` flag, instead of deleting them, and check this flag on every request to prevent reuse; or implement a custom session store that tracks session invalidation timestamps and refuses to accept session data if the session was invalidated after the request began. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32441"> read more </a> </article> <hr> <article> <h3> CVE-2025-35939 - Craft CMS Unauthenticated Session File Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-35939 <br> <strong>Published : </strong> May 7, 2025, 11:15 p.m. | 6 hours, 40 minutes ago <br> <strong>Description : </strong>Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at `/var/lib/php/sessions`. Such session files are named `sess_[session_value]`, where `[session_value]` is provided to the client in a `Set-Cookie` response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35939"> read more </a> </article> <hr> <article> <h3> CVE-2025-46727 - Rack Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46727 <br> <strong>Published : </strong> May 7, 2025, 11:15 p.m. | 6 hours, 40 minutes ago <br> <strong>Description : </strong>Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with extremely large numbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pair and adds it to a Hash without enforcing an upper bound on the total number of parameters. This allows an attacker to send a single request containing hundreds of thousands (or more) of parameters, which consumes excessive memory and CPU during parsing. An attacker can trigger denial of service by sending specifically crafted HTTP requests, which can cause memory exhaustion or pin CPU resources, stalling or crashing the Rack server. This results in full service disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other mitigations are available. One may use middleware to enforce a maximum query string size or parameter count, or employ a reverse proxy (such as Nginx) to limit request sizes and reject oversized query strings or bodies. Limiting request body sizes and query string lengths at the web server or CDN level is an effective mitigation. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46727"> read more </a> </article> <hr> <article> <h3> CVE-2023-7303 - Q2Apro Q2Apro-On-Site-Notifications Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-7303 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-7303"> read more </a> </article> <hr> <article> <h3> CVE-2024-11953 - Apache Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2024-11953 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11953"> read more </a> </article> <hr> <article> <h3> CVE-2025-31644 - F5 BIG-IP Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31644 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31644"> read more </a> </article> <hr> <article> <h3> CVE-2025-35995 - BIG-IP PEM Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-35995 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35995"> read more </a> </article> <hr> <article> <h3> CVE-2025-36504 - BIG-IP HTTP/2 httprouter Profile Memory Consumption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36504 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36504"> read more </a> </article> <hr> <article> <h3> CVE-2025-36525 - BIG-IP APM PingAccess Profile Request Termination Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36525 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36525"> read more </a> </article> <hr> <article> <h3> CVE-2025-36546 - F5OS SSH Key-Based Authentication Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-36546 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36546"> read more </a> </article> <hr> <article> <h3> CVE-2025-36557 - F5 Big-IP HTTP Enforce RFC Compliance Remote Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-36557 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36557"> read more </a> </article> <hr> <article> <h3> CVE-2025-41399 - F5 BIG-IP SCTP Profile Memory Exhaustion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41399 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41399"> read more </a> </article> <hr> <article> <h3> CVE-2025-41414 - F5 BIG-IP HTTP/2 Profile Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-41414 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41414"> read more </a> </article> <hr> <article> <h3> CVE-2025-41431 - BIG-IP Traffic Management Microkernel (TMM) Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-41431 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41431"> read more </a> </article> <hr> <article> <h3> CVE-2025-41433 - F5 BIG-IP SIP MRF ALG Profile Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41433 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41433"> read more </a> </article> <hr> <article> <h3> CVE-2025-43878 - F5OS-C/A Appliance Mode Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43878 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43878"> read more </a> </article> <hr> <article> <h3> CVE-2025-46265 - F5OS Improper Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46265 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46265"> read more </a> </article> <hr> <article> <h3> CVE-2025-46821 - Envoy URI Template Path Matching Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46821 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the `*` character from a set of valid characters in the URI path. As a result URI path containing the `*` character will not match a URI template expressions. This can result in bypass of RBAC rules when configured using the `uri_template` permissions. This vulnerability is fixed in Envoy versions v1.34.1, v1.33.3, v1.32.6, v1.31.8. As a workaround, configure additional RBAC permissions using `url_path` with `safe_regex` expression. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46821"> read more </a> </article> <hr> <article> <h3> CVE-2025-46826 - INSA Rouen insa-auth Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46826 <br> <strong>Published : </strong> May 7, 2025, 10:15 p.m. | 7 hours, 41 minutes ago <br> <strong>Description : </strong>insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46826"> read more </a> </article> <hr> <article> <h3> CVE-2025-3925 - BrightSign Players Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3925 <br> <strong>Published : </strong> May 7, 2025, 9:16 p.m. | 8 hours, 40 minutes ago <br> <strong>Description : </strong>BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3925"> read more </a> </article> <hr> <article> <h3> CVE-2025-4043 - Apache Device Unprivileged File Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-4043 <br> <strong>Published : </strong> May 7, 2025, 9:16 p.m. | 8 hours, 40 minutes ago <br> <strong>Description : </strong>An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4043"> read more </a> </article> <hr> <article> <h3> CVE-2025-31177 - Gnuplot Heap Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31177 <br> <strong>Published : </strong> May 7, 2025, 9:16 p.m. | 7 hours, 37 minutes ago <br> <strong>Description : </strong>gnuplot is affected by a heap buffer overflow at function utf8_copy_one. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31177"> read more </a> </article> <hr> <article> <h3> CVE-2025-45514 - Tenda FH451 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45514 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 8 hours, 40 minutes ago <br> <strong>Description : </strong>Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45514"> read more </a> </article> <hr> <article> <h3> CVE-2025-45388 - Wagtail CMS Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-45388 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF file. When a user clicks the document in the CMS interface, the payload executes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45388"> read more </a> </article> <hr> <article> <h3> CVE-2025-29746 - Koillection Cross Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-29746 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29746"> read more </a> </article> <hr> <article> <h3> CVE-2025-30147 - Hyperledger Besu EC Point Crafting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30147 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 through 25.2.2, corresponding to besu-native versions 0.9.0 through 1.2.1, have a potential consensus bug for the precompiles ALTBN128_ADD (0x06), ALTBN128_MUL (0x07), and ALTBN128_PAIRING (0x08). These precompiles were reimplemented in besu-native using gnark-crypto's bn254 implementation, as the former implementation used a library which was no longer maintained and not sufficiently performant. The new gnark implementation was initially added in version 0.9.0 of besu-native but was not utilized by Besu until version 0.9.2 in Besu 24.7.1. The issue is that there are EC points which may be crafted which are in the correct subgroup but are not on the curve and the besu-native gnark implementation was relying on subgroup checks to perform point-on-curve checks as well. The version of gnark-crypto used at the time did not do this check when performing subgroup checks. The result is that it was possible for Besu to give an incorrect result and fall out of consensus when executing one of these precompiles against a specially crafted input point. Additionally, homogenous Besu-only networks can potentially enshrine invalid state which would be incorrect and difficult to process with patched versions of besu which handle these calls correctly. The underlying defect has been patched in besu-native release 1.3.0. The fixed version of Besu is version 25.3.0. As a workaround for versions of Besu with the problem, the native precompile for altbn128 may be disabled in favor of the pure-java implementation. The pure java implementation is significantly slower, but does not have this consensus issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30147"> read more </a> </article> <hr> <article> <h3> CVE-2025-3272 - OpenText Operations Bridge Manager Password Change Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3272 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3272"> read more </a> </article> <hr> <article> <h3> CVE-2025-3476 - OpenText Operations Bridge Manager Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3476 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3476"> read more </a> </article> <hr> <article> <h3> CVE-2025-26168 - IXON VPN Client Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-26168 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26168"> read more </a> </article> <hr> <article> <h3> CVE-2025-26169 - IXON VPN Client Local Privilege Escalation Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-26169 <br> <strong>Published : </strong> May 7, 2025, 7:16 p.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26169"> read more </a> </article> <hr> <article> <h3> CVE-2025-20202 - Cisco IOS XE Wireless Controller Software CDP Neighbor Report Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20202 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20202"> read more </a> </article> <hr> <article> <h3> CVE-2025-20210 - "Cisco Catalyst Center Unauthenticated API Proxy Configuration Disclosure and Modification" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20210 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This vulnerability is due to the lack of authentication in an API endpoint. An attacker could exploit this vulnerability by sending a request to the affected API of a Catalyst Center device. A successful exploit could allow the attacker to view or modify the outgoing proxy configuration, which could disrupt internet traffic from Cisco Catalyst Center or may allow the attacker to intercept outbound internet traffic. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20210"> read more </a> </article> <hr> <article> <h3> CVE-2025-20213 - Cisco Catalyst SD-WAN Manager Local File System Overwrite Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20213 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system. This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20213"> read more </a> </article> <hr> <article> <h3> CVE-2025-20214 - Cisco IOS XE NACM Unauthorized Data Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20214 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior causes results to be filtered incorrectly. An attacker could exploit this vulnerability by using either NETCONF, RESTCONF, or gRPC Network Management Interface (gNMI) protocols and query data on paths that may have been denied by the NACM configuration. A successful exploit could allow the attacker to access data that should have been restricted according to the NACM configuration. Note: This vulnerability requires that the attacker obtain the credentials from a valid user with privileges lower than 15, and that NACM was configured to provide restricted read access for that user. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20214"> read more </a> </article> <hr> <article> <h3> CVE-2025-20216 - Cisco Catalyst SD-WAN Manager Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20216 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An attacker could exploit this vulnerability by convincing an authenticated user to click a malicious link. A successful exploit could allow the attacker to inject HTML into the browser of an authenticated Cisco Catalyst SD-WAN Manager user. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20216"> read more </a> </article> <hr> <article> <h3> CVE-2025-20221 - Cisco IOS XE SD-WAN Remote Packet Filtering Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20221 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20221"> read more </a> </article> <hr> <article> <h3> CVE-2025-20223 - Cisco Catalyst Center HTTP Request Access Control Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-20223 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to read and modify data in a repository that belongs to an internal service of an affected device. This vulnerability is due to insufficient enforcement of access control on HTTP requests. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read and modify data that is handled by an internal service on the affected device. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20223"> read more </a> </article> <hr> <article> <h3> CVE-2025-32819 - SonicWall SMA SSLVPN File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32819 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32819"> read more </a> </article> <hr> <article> <h3> CVE-2025-32820 - SMA100 Path Traversal Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32820 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32820"> read more </a> </article> <hr> <article> <h3> CVE-2025-32821 - SMA100 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32821 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32821"> read more </a> </article> <hr> <article> <h3> CVE-2025-46824 - Discourse Code Review Plugin Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46824 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on users' browsers by posting links to malicious GitHub commits. This problem is patched in commit eed3a80 of the discourse-code-review plugin. As a workaround, one may disable the plugin. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46824"> read more </a> </article> <hr> <article> <h3> CVE-2025-46828 - WeGIA Web Manager SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46828 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This issue allows attackers to inject and execute arbitrary SQL statements against the application's underlying database. As a result, it may lead to data exfiltration, authentication bypass, or complete database compromise. Version 3.3.1 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46828"> read more </a> </article> <hr> <article> <h3> CVE-2025-47203 - Dropbear SSH Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47203 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47203"> read more </a> </article> <hr> <article> <h3> CVE-2025-47423 - Furbo Personal Weather Station File Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47423 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47423"> read more </a> </article> <hr> <article> <h3> CVE-2025-20199 - "Cisco IOS XE CLI Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20199 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20199"> read more </a> </article> <hr> <article> <h3> CVE-2025-20200 - Cisco IOS XE Software CLI Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20200 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20200"> read more </a> </article> <hr> <article> <h3> CVE-2025-20201 - Cisco IOS XE Software CLI Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20201 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 2 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20201"> read more </a> </article> <hr> <article> <h3> CVE-2025-20191 - Cisco SISF DHCPv6 Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-20191 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the incorrect handling of DHCPv6 packets. An attacker could exploit this vulnerability by sending a crafted DHCPv6 packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20191"> read more </a> </article> <hr> <article> <h3> CVE-2025-20192 - Cisco IOS XE Software IKEv1 Phase 2 Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20192 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20192"> read more </a> </article> <hr> <article> <h3> CVE-2025-20193 - Cisco IOS XE Software Web-Based Management Interface File Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20193 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.r This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read files from the underlying operating system. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20193"> read more </a> </article> <hr> <article> <h3> CVE-2025-20194 - Cisco IOS XE Software Web-Based Management Interface Authentication Bypass and File Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20194 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20194"> read more </a> </article> <hr> <article> <h3> CVE-2025-20195 - Cisco IOS XE CSRF Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20195 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an already authenticated user to follow a crafted link. A successful exploit could allow the attacker to clear the syslog, parser, and licensing logs on the affected device if the targeted user has privileges to clear those logs. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20195"> read more </a> </article> <hr> <article> <h3> CVE-2025-20196 - Cisco IOx HTTP Request Handling Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-20196 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20196"> read more </a> </article> <hr> <article> <h3> CVE-2025-20197 - Cisco IOS XE Software CLI Command Injection Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-20197 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20197"> read more </a> </article> <hr> <article> <h3> CVE-2025-20198 - Cisco IOS XE Software CLI Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20198 <br> <strong>Published : </strong> May 7, 2025, 6:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20198"> read more </a> </article> <hr> <article> <h3> CVE-2025-46551 - JRuby-OpenSSL SSL Hostname Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46551 <br> <strong>Published : </strong> May 7, 2025, 5:15 p.m. | 39 minutes ago <br> <strong>Description : </strong>JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL certificates, JRuby-OpenSSL does not verify that the hostname presented in the certificate matches the one the user tries to connect to. This means a man-in-the-middle could just present any valid cert for a completely different domain they own, and JRuby would accept the cert. Anybody using JRuby to make requests of external APIs, or scraping the web, that depends on https to connect securely. JRuby-OpenSSL version 0.15.4 contains a fix for the issue. This fix is included in JRuby versions 10.0.0.1 and 9.4.12.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46551"> read more </a> </article> <hr> <article> <h3> CVE-2024-47619 - Syslog-ng TLS Wildcard Certificate Matching Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-47619 <br> <strong>Published : </strong> May 7, 2025, 4:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47619"> read more </a> </article> <hr> <article> <h3> CVE-2025-46827 - Graylog HTML Form Cookie Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46827 <br> <strong>Published : </strong> May 7, 2025, 4:15 p.m. | 1 hour, 40 minutes ago <br> <strong>Description : </strong>Graylog is a free and open log management platform. Prior to versions 6.0.14, 6.1.10, and 6.2.0, it is possible to obtain user session cookies by submitting an HTML form as part of an Event Definition Remediation Step field. For this attack to succeed, the attacker needs a user account with permissions to create event definitions, while the user must have permissions to view alerts. Additionally, an active Input must be present on the Graylog server that is capable of receiving form data (e.g. a HTTP input, TCP raw or syslog etc). Versions 6.0.14, 6.1.10, and 6.2.0 fix the issue. No known workarounds are available, as long as the relatively rare prerequisites are met. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46827"> read more </a> </article> <hr> <article> <h3> CVE-2025-47657 - Productive Minds Productive Commerce SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47657 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Productive Minds Productive Commerce allows SQL Injection. This issue affects Productive Commerce: from n/a through 1.1.22. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47657"> read more </a> </article> <hr> <article> <h3> CVE-2025-47659 - WPBakery Visual Composer WHMCS Elements Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47659 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements allows Stored XSS. This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through 1.0.4.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47659"> read more </a> </article> <hr> <article> <h3> CVE-2025-47661 - Codemstory WordPress SimplePay CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47661 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in codemstory 워드프레스 결제 심플페이 allows Cross Site Request Forgery. This issue affects 워드프레스 결제 심플페이: from n/a through 5.2.11. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47661"> read more </a> </article> <hr> <article> <h3> CVE-2025-47662 - Woobox Stored Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47662 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox allows Stored XSS. This issue affects Woobox: from n/a through 1.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47662"> read more </a> </article> <hr> <article> <h3> CVE-2025-47664 - ThimPress WP Pipes SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47664 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Server-Side Request Forgery (SSRF) vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47664"> read more </a> </article> <hr> <article> <h3> CVE-2025-47665 - Bistromatic N360 Splash Screen Stored Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47665 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bistromatic N360 | Splash Screen allows Stored XSS. This issue affects N360 | Splash Screen: from n/a through 1.0.6. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47665"> read more </a> </article> <hr> <article> <h3> CVE-2025-47667 - LiveAgent CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47667 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in qusupport LiveAgent allows Cross Site Request Forgery. This issue affects LiveAgent: from n/a through 4.4.7. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47667"> read more </a> </article> <hr> <article> <h3> CVE-2025-47668 - CookieCode Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47668 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cookiecode CookieCode allows Stored XSS. This issue affects CookieCode: from n/a through 2.4.4. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47668"> read more </a> </article> <hr> <article> <h3> CVE-2025-47669 - Sabuj Kundu CBX Map for Google Map OpenStreetMap Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-47669 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap allows DOM-Based XSS. This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.12. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47669"> read more </a> </article> <hr> <article> <h3> CVE-2025-47674 - Credova Financial CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47674 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Credova Financial Credova_Financial allows Cross Site Request Forgery. This issue affects Credova_Financial: from n/a through 2.5.0. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47674"> read more </a> </article> <hr> <article> <h3> CVE-2025-47675 - Woobox Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47675 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox allows DOM-Based XSS. This issue affects Woobox: from n/a through 1.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47675"> read more </a> </article> <hr> <article> <h3> CVE-2025-47676 - Faiyaz Alam User Login History Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-47676 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faiyaz Alam User Login History allows Stored XSS. This issue affects User Login History: from n/a through 2.1.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47676"> read more </a> </article> <hr> <article> <h3> CVE-2025-47677 - GT3themes Photo Gallery Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-47677 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gt3themes Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery allows Stored XSS. This issue affects Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery: from n/a through 2.7.7.25. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47677"> read more </a> </article> <hr> <article> <h3> CVE-2025-47679 - RS WP Book Showcase Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47679 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RS WP THEMES RS WP Book Showcase allows DOM-Based XSS. This issue affects RS WP Book Showcase: from n/a through 6.7.40. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47679"> read more </a> </article> <hr> <article> <h3> CVE-2025-47681 - Ability, Inc Web Accessibility with Max Access CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-47681 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access allows Cross Site Request Forgery. This issue affects Web Accessibility with Max Access: from n/a through 2.0.9. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47681"> read more </a> </article> <hr> <article> <h3> CVE-2025-47683 - Florent Maillefaud WP Maintenance Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47683 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance allows Object Injection. This issue affects WP Maintenance: from n/a through 6.1.9.7. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47683"> read more </a> </article> <hr> <article> <h3> CVE-2025-47684 - Smaily for WP CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47684 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Smaily Smaily for WP allows Cross Site Request Forgery. This issue affects Smaily for WP: from n/a through 3.1.6. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47684"> read more </a> </article> <hr> <article> <h3> CVE-2025-47685 - Moloni Contribuinte Checkout CSRF Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-47685 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout allows Stored XSS. This issue affects Contribuinte Checkout: from n/a through 2.0.02. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47685"> read more </a> </article> <hr> <article> <h3> CVE-2025-47686 - DELUCKS SEO Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-47686 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DELUCKS DELUCKS SEO allows Stored XSS. This issue affects DELUCKS SEO: from n/a through 2.5.9. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47686"> read more </a> </article> <hr> <article> <h3> CVE-2025-47688 - Saad Iqbal Advanced File Manager Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47688 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Saad Iqbal Advanced File Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced File Manager: from n/a through 5.3.1. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47688"> read more </a> </article> <hr> <article> <h3> CVE-2025-47691 - Ultimate Member Code Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47691 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member allows Code Injection. This issue affects Ultimate Member: from n/a through 2.10.3. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47691"> read more </a> </article> <hr> <article> <h3> CVE-2025-47692 - ContentStudio Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47692 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 2 hours, 39 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in contentstudio ContentStudio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ContentStudio: from n/a through 1.3.3. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47692"> read more </a> </article> <hr> <article> <h3> CVE-2025-47656 - Spiraclethemes Site Library Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47656 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spiraclethemes Spiraclethemes Site Library allows Stored XSS. This issue affects Spiraclethemes Site Library: from n/a through 1.4.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47656"> read more </a> </article> <hr> <article> <h3> CVE-2025-47653 - WP-Recall PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47653 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in tggfref WP-Recall allows PHP Local File Inclusion. This issue affects WP-Recall: from n/a through 16.26.14. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47653"> read more </a> </article> <hr> <article> <h3> CVE-2025-47655 - themarketer2023 CSRF Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47655 <br> <strong>Published : </strong> May 7, 2025, 3:16 p.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in themarketer2023 theMarketer allows Stored XSS. This issue affects theMarketer: from n/a through 1.4.7. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47655"> read more </a> </article> <hr> <article> <h3> CVE-2020-36791 - Linux Kernel net_sched Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2020-36791 <br> <strong>Published : </strong> May 7, 2025, 2:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599be01ee567 ("net_sched: fix an OOB access in cls_tcindex") I moved cp->hash calculation before the first tcindex_alloc_perfect_hash(), but cp->alloc_hash is left untouched. This difference could lead to another out of bound access. cp->alloc_hash should always be the size allocated, we should update it after this tcindex_alloc_perfect_hash(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2020-36791"> read more </a> </article> <hr> <article> <h3> CVE-2025-29152 - Lemeconsultoria HCM Galera App Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29152 <br> <strong>Published : </strong> May 7, 2025, 2:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via multiple components, including Strategic Planning Perspective Registration, Training Request, Perspective Editing, Education Registration, Hierarchical Level Registration, Decision Level Registration, Perspective Registration, Company Group Registration, Company Registration, News Registration, Employee Editing, Goal Team Registration, Learning Resource Type Registration, Learning Resource Family Registration, Learning Resource Supplier Registration, and Cycle Maintenance. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29152"> read more </a> </article> <hr> <article> <h3> CVE-2025-29153 - Lemeconsultoria HCM Galera.app SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-29153 <br> <strong>Published : </strong> May 7, 2025, 2:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>SQL Injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the Data export, filters functions. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29153"> read more </a> </article> <hr> <article> <h3> CVE-2025-29154 - Lemeconsultoria HCM HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29154 <br> <strong>Published : </strong> May 7, 2025, 2:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>HTML injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the .galera.app/ted/solicitacao_treinamento/, .galera.app/rh/metas/perspectiva_estrategica/edicao/, .galera.app/rh/cadastros/perspectivas/listagem/adc/, .galera.app/escolaridade/listagem/, .galera.app/estados_civis/cadastro/, .galera.app/nivel_hierarquico/listagem/, .galera.app/nivel_decisorio/cadastro/, .galera.app/escolaridade/cadastro/, .galera.app/nivel_decisorio/listagem/, .galera.app/rh/cadastros/perspectivas/listagem/, .galera.app/empresas_grupo/cadastro/, .galera.app/empresas/edicao/, .galera.app/liais/listagem/, .galera.app/noticias/listagem/, .galera.app/gerenciamento-de-ciclo/abertura/cadastrar, .galera.app/colaborador/cadastro/cursos/adc/edicao/, .galera.app/colaborador/cadastro/adc/, .galera.app/cads_aux/escalact/, .galera.app/ncf/tec/cadastro/ct/ .galera.app/rh/metas/painel/, .galera.app/rh/metas/equipe/edicao/, .galera.app/rh/pdi/tipo_recursos/edicao/, .galera.app/rh/pdi/familia_recursos/cadastro/, .galera.app/rh/pdi/fornecedores/edicao/, and .galera.app/rh/pdi/recursos/cadastro/ components. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29154"> read more </a> </article> <hr> <article> <h3> CVE-2025-29602 - Flatpress Cross Site Scripting (XSS) in Administration Area </h3> <p> <strong>CVE ID : </strong>CVE-2025-29602 <br> <strong>Published : </strong> May 7, 2025, 2:15 p.m. | 37 minutes ago <br> <strong>Description : </strong>flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29602"> read more </a> </article> <hr> <article> <h3> CVE-2025-33093 - IBM Sterling Partner Engagement Manager Exposed JWT Secret Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-33093 <br> <strong>Published : </strong> May 7, 2025, 11:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33093"> read more </a> </article> <hr> <article> <h3> CVE-2025-4104 - WordPress Frontend Dashboard Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-4104 <br> <strong>Published : </strong> May 7, 2025, 10:15 a.m. | 4 hours, 38 minutes ago <br> <strong>Description : </strong>The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_wp_ajax_fed_login_form_post() function in versions 1.0 to 2.2.6. This makes it possible for unauthenticated attackers to reset the administrator’s email and password, and elevate their privileges to that of an administrator. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4104"> read more </a> </article> <hr> <article> <h3> CVE-2025-20965 - Samsung Bixby Unauthenticated Data Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20965 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20965"> read more </a> </article> <hr> <article> <h3> CVE-2025-20966 - Samsung Gallery Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20966 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20966"> read more </a> </article> <hr> <article> <h3> CVE-2025-20967 - Samsung Gallery File Access Vulnerability (Privilege Escalation) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20967 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege of Samsung Gallery. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20967"> read more </a> </article> <hr> <article> <h3> CVE-2025-20968 - Samsung Gallery Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-20968 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operations within Samsung Gallery. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20968"> read more </a> </article> <hr> <article> <h3> CVE-2025-20969 - Samsung Gallery Input Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20969 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20969"> read more </a> </article> <hr> <article> <h3> CVE-2025-20970 - Bixby Vision Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20970 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20970"> read more </a> </article> <hr> <article> <h3> CVE-2025-20971 - Samsung Flow Input Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20971 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20971"> read more </a> </article> <hr> <article> <h3> CVE-2025-20972 - Samsung Flow Intent Verification Vulnerability (Information Exposure) </h3> <p> <strong>CVE ID : </strong>CVE-2025-20972 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20972"> read more </a> </article> <hr> <article> <h3> CVE-2025-20973 - Android Secure Folder Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-20973 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20973"> read more </a> </article> <hr> <article> <h3> CVE-2025-20974 - Android PackageInstallerCN Permission Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-20974 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to bypass user interaction for requested installation. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20974"> read more </a> </article> <hr> <article> <h3> CVE-2025-20975 - AODService Android Activity Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20975 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20975"> read more </a> </article> <hr> <article> <h3> CVE-2025-20976 - Samsung Notes Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20976 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20976"> read more </a> </article> <hr> <article> <h3> CVE-2025-20977 - Samsung Notes Implicit Intent Information Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20977 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20977"> read more </a> </article> <hr> <article> <h3> CVE-2025-20978 - PENUP Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20978 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20978"> read more </a> </article> <hr> <article> <h3> CVE-2025-20979 - Android libsavscmn Out-of-Bounds Write Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-20979 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20979"> read more </a> </article> <hr> <article> <h3> CVE-2025-20980 - Android libsavscmn Out-of-Bounds Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-20980 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20980"> read more </a> </article> <hr> <article> <h3> CVE-2025-27533 - Apache ActiveMQ Memory Allocation with Excessive Size Value Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-27533 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected. Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue. Existing users may implement mutual TLS to mitigate the risk on affected brokers. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27533"> read more </a> </article> <hr> <article> <h3> CVE-2025-39361 - WProyal Royal Elementor Addons Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-39361 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 5 hours, 38 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1017. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39361"> read more </a> </article> <hr> <article> <h3> CVE-2025-20960 - CocktailBarService Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20960 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20960"> read more </a> </article> <hr> <article> <h3> CVE-2025-20961 - Sepunion Service Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20961 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20961"> read more </a> </article> <hr> <article> <h3> CVE-2025-20962 - Samsung S Pen Gesture Service Position Tracking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20962 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20962"> read more </a> </article> <hr> <article> <h3> CVE-2025-20963 - Symantec Antivirus Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-20963 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20963"> read more </a> </article> <hr> <article> <h3> CVE-2025-20964 - Apache Libsavsrv Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20964 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 4 hours, 40 minutes ago <br> <strong>Description : </strong>Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20964"> read more </a> </article> <hr> <article> <h3> CVE-2025-20958 - UnifiedWFC Wireless Fingerprinting Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-20958 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 39 minutes ago <br> <strong>Description : </strong>Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoWiFi related behaviors. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20958"> read more </a> </article> <hr> <article> <h3> CVE-2025-20959 - Samsung Wi-Fi P2P Sensitive Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-20959 <br> <strong>Published : </strong> May 7, 2025, 9:15 a.m. | 39 minutes ago <br> <strong>Description : </strong>Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. <br> <strong>Severity:</strong> 5.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20959"> read more </a> </article> <hr> <article> <h3> CVE-2025-3766 - WordPress Login Lockdown Protection Unauthorized Nonce Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3766 <br> <strong>Published : </strong> May 7, 2025, 5:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>The Login Lockdown & Protection plugin for WordPress is vulnerable to unauthorized nonce access due to a missing capability check on the ajax_run_tool function in all versions up to, and including, 2.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain a valid nonce that can be used to generate a global unlock key, which can in turn be used to add arbitrary IP address to the plugin allowlist. This can only by exploited on new installations where the site administrator hasn't visited the loginlockdown page yet. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3766"> read more </a> </article> <hr> <article> <h3> CVE-2025-2821 - WordPress Search Exclude Plugin Unauthenticated Data Modification </h3> <p> <strong>CVE ID : </strong>CVE-2025-2821 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_rest_permission function in all versions up to, and including, 2.4.9. This makes it possible for unauthenticated attackers to modify plugin settings, excluding content from search results. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2821"> read more </a> </article> <hr> <article> <h3> CVE-2025-3844 - PeproDev Ultimate Profile Solutions WordPress Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3844 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possible to set a OTP code and subsequently log in with that OTP code. This makes it possible for unauthenticated attackers to login as other users on the site, including administrators. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3844"> read more </a> </article> <hr> <article> <h3> CVE-2025-3851 - WordPress SmartPay Insecure Direct Object Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3851 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 1.1.0 to 2.7.13 via the show() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's data like email address, name, and notes. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3851"> read more </a> </article> <hr> <article> <h3> CVE-2025-3852 - Wordpress WPshop E-Commerce Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3852 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.0 to 2.6.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email & password through the update() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3852"> read more </a> </article> <hr> <article> <h3> CVE-2025-3853 - WordPress WPshop E-Commerce Plugin Insecure Direct Object Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3853 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 2.0.0 to 2.6.0 via the callback_generate_api_key() due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create valid API keys on behalf of other users. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3853"> read more </a> </article> <hr> <article> <h3> CVE-2025-3860 - CarDealerPress for WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3860 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The CarDealerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘saleclass' parameter in all versions up to, and including, 6.7.2504.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3860"> read more </a> </article> <hr> <article> <h3> CVE-2025-3921 - PeproDev Ultimate Profile Solutions WordPress Unauthenticated Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3921 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handel_ajax_req() function in versions 1.9.1 to 7.5.2. This makes it possible for unauthenticated attackers to update arbitrary user's metadata which can be leveraged to block an administrator from accessing their site when wp_capabilities is set to 0. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3921"> read more </a> </article> <hr> <article> <h3> CVE-2025-3924 - PeproDev Ultimate Profile Solutions WordPress Unauthenticated Email Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3924 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The plugin looks up the 'valid_email' value based solely on a supplied username parameter, without verifying that the requester is associated with that user account. This allows unauthenticated attackers to enumerate email addresses for any user, including administrators. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3924"> read more </a> </article> <hr> <article> <h3> CVE-2025-4054 - Relevanssi WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4054 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and including, 4.24.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the search results. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4054"> read more </a> </article> <hr> <article> <h3> CVE-2025-4055 - WordPress Multiple Post Type Order Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4055 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Multiple Post Type Order plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mpto' shortcode in all versions up to, and including, 1.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4055"> read more </a> </article> <hr> <article> <h3> CVE-2025-4220 - Xavin's List Subpages WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4220 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Xavin's List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xls' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4220"> read more </a> </article> <hr> <article> <h3> CVE-2025-4335 - "WordPress Woocommerce Multiple Addresses Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4335 <br> <strong>Published : </strong> May 7, 2025, 3:15 a.m. | 3 hours, 12 minutes ago <br> <strong>Description : </strong>The Woocommerce Multiple Addresses plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.7.1. This is due to insufficient restrictions on user meta that can be updated through the save_multiple_shipping_addresses() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4335"> read more </a> </article> <hr> <article> <h3> CVE-2025-3218 - IBM i Netserver Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3218 <br> <strong>Published : </strong> May 7, 2025, 2:15 a.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 07 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3218"> read more </a> </article> <hr> <article> <h3> CVE-2025-0855 - WordPress PGS Core Plugin PHP Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0855 <br> <strong>Published : </strong> May 6, 2025, 11:15 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.8.0 via deserialization of untrusted input in the 'import_header' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0855"> read more </a> </article> <hr> <article> <h3> CVE-2025-0856 - WordPress PGS Core Plugin Unauthenticated Remote Data Manipulation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0856 <br> <strong>Published : </strong> May 6, 2025, 11:15 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to add, modify, or plugin options. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0856"> read more </a> </article> <hr> <article> <h3> CVE-2025-0853 - WordPress PGS Core Plugin SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0853 <br> <strong>Published : </strong> May 6, 2025, 10:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0853"> read more </a> </article> <hr> <article> <h3> CVE-2025-47420 - Crestron Automate VX Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47420 <br> <strong>Published : </strong> May 6, 2025, 10:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47420"> read more </a> </article> <hr> <article> <h3> CVE-2025-4372 - Google Chrome WebAudio Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4372 <br> <strong>Published : </strong> May 6, 2025, 10:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4372"> read more </a> </article> <hr> <article> <h3> CVE-2025-44073 - SeaCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44073 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44073"> read more </a> </article> <hr> <article> <h3> CVE-2025-44899 - Tenda RX3 Stack Overflow Vulnerability in WifiGuestSet </h3> <p> <strong>CVE ID : </strong>CVE-2025-44899 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44899"> read more </a> </article> <hr> <article> <h3> CVE-2025-46572 - Auth0 Passport-wsfed-saml2 SAML Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46572 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user in the Auth0 tenant during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46572"> read more </a> </article> <hr> <article> <h3> CVE-2025-46573 - OpenSAMLPassport-WSFed Impersonation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46573 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46573"> read more </a> </article> <hr> <article> <h3> CVE-2025-47418 - Crestron Automate VX Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47418 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication when the system is recording and recording can be enabled remotely via a network API. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47418"> read more </a> </article> <hr> <article> <h3> CVE-2025-47419 - Crestron Automate VX Insecure Communication Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47419 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47419"> read more </a> </article> <hr> <article> <h3> CVE-2025-0649 - Google Tensorflow Serving JSON Deserialization Remote Crash </h3> <p> <strong>CVE ID : </strong>CVE-2025-0649 <br> <strong>Published : </strong> May 6, 2025, 9:16 p.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 21:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0649"> read more </a> </article> <hr> <article> <h3> CVE-2024-12225 - Quarkus WebAuthn Default Endpoints Information Disclosure and Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-12225 <br> <strong>Published : </strong> May 6, 2025, 8:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12225"> read more </a> </article> <hr> <article> <h3> CVE-2025-47256 - Libxmp Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47256 <br> <strong>Published : </strong> May 6, 2025, 8:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47256"> read more </a> </article> <hr> <article> <h3> CVE-2025-47417 - Crestron Automate VX Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-47417 <br> <strong>Published : </strong> May 6, 2025, 8:15 p.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on the system, and there is no visible indication that this is being done. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47417"> read more </a> </article> <hr> <article> <h3> CVE-2025-46816 - "goshs Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46816 <br> <strong>Published : </strong> May 6, 2025, 7:16 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c`, thus allowing anyone to execute arbitrary command through the use of websockets. Version 1.0.5 fixes the issue. <br> <strong>Severity:</strong> 9.4 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46816"> read more </a> </article> <hr> <article> <h3> CVE-2025-46820 - GitHub phpgt/Dom GitHub Token Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46820 <br> <strong>Published : </strong> May 6, 2025, 7:16 p.m. | 7 hours, 11 minutes ago <br> <strong>Description : </strong>phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the GitHub API to push malicious code or rewrite release commits in your repository. Any downstream user of the repository may be affected, but the token should only be valid for the duration of the workflow run, limiting the time during which exploitation could occur. Version 4.1.8 fixes the issue. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46820"> read more </a> </article> <hr> <article> <h3> CVE-2025-25014 - Kibana Prototype Pollution Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-25014 <br> <strong>Published : </strong> May 6, 2025, 6:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25014"> read more </a> </article> <hr> <article> <h3> CVE-2025-37730 - Logstash SSL Verification MitM Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37730 <br> <strong>Published : </strong> May 6, 2025, 6:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37730"> read more </a> </article> <hr> <article> <h3> CVE-2025-44900 - Tenda RX3 Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-44900 <br> <strong>Published : </strong> May 6, 2025, 6:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44900"> read more </a> </article> <hr> <article> <h3> CVE-2025-46815 - ZITADEL IdP Intent Session Token Abuse </h3> <p> <strong>CVE ID : </strong>CVE-2025-46815 <br> <strong>Published : </strong> May 6, 2025, 6:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API. This API enables the use of IdPs for authentication, known as idp intents. Following a successful idp intent, the client receives an id and token on a predefined URI. These id and token can then be used to authenticate the user or their session. However, prior to versions 3.0.0, 2.71.9, and 2.70.10, it was possible to exploit this feature by repeatedly using intents. This allowed an attacker with access to the application’s URI to retrieve the id and token, enabling them to authenticate on behalf of the user. It's important to note that the use of additional factors (MFA) prevents a complete authentication process and, consequently, access to the ZITADEL API. Versions 3.0.0, 2.71.9, and 2.70.10 contain a fix for the issue. No known workarounds other than upgrading are available. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46815"> read more </a> </article> <hr> <article> <h3> CVE-2025-4388 - Liferay Portal/DXP Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4388 <br> <strong>Published : </strong> May 6, 2025, 6:15 p.m. | 8 hours, 12 minutes ago <br> <strong>Description : </strong>A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4388"> read more </a> </article> <hr> <article> <h3> CVE-2025-46735 - Terraform WinDNS Provider Authenticated Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46735 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found in Terraform WinDNS Provider before version `1.0.5`. The `windns_record` resource did not sanitize the input variables. This could lead to authenticated command injection in the underlyding powershell command prompt. Version 1.0.5 contains a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46735"> read more </a> </article> <hr> <article> <h3> CVE-2025-46736 - Umbraco Account Existence Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46736 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds are available. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46736"> read more </a> </article> <hr> <article> <h3> CVE-2025-4041 - Optigo Networks ONS NC600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4041 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 9 hours, 11 minutes ago <br> <strong>Description : </strong>In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4041"> read more </a> </article> <hr> <article> <h3> CVE-2025-30165 - vLLM ZeroMQ Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30165 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a `SUB` ZeroMQ socket and connect to an `XPUB` socket on the primary vLLM host. When data is received on this `SUB` socket, it is deserialized with `pickle`. This is unsafe, as it can be abused to execute code on a remote machine. Since the vulnerability exists in a client that connects to the primary vLLM host, this vulnerability serves as an escalation point. If the primary vLLM host is compromised, this vulnerability could be used to compromise the rest of the hosts in the vLLM deployment. Attackers could also use other means to exploit the vulnerability without requiring access to the primary vLLM host. One example would be the use of ARP cache poisoning to redirect traffic to a malicious endpoint used to deliver a payload with arbitrary code to execute on the target machine. Note that this issue only affects the V0 engine, which has been off by default since v0.8.0. Further, the issue only applies to a deployment using tensor parallelism across multiple hosts, which we do not expect to be a common deployment pattern. Since V0 is has been off by default since v0.8.0 and the fix is fairly invasive, the maintainers of vLLM have decided not to fix this issue. Instead, the maintainers recommend that users ensure their environment is on a secure network in case this pattern is in use. The V1 engine is not affected by this issue. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30165"> read more </a> </article> <hr> <article> <h3> CVE-2025-32022 - Finit Urandom Heap Buffer Overwrite Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32022 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects everyone using Finit 4.2 or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgrade or backport the fix to urandom.c are strongly recommended to disable the plugin in the call to the `configure` script. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32022"> read more </a> </article> <hr> <article> <h3> CVE-2025-45250 - MrDoc SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45250 <br> <strong>Published : </strong> May 6, 2025, 5:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45250"> read more </a> </article> <hr> <article> <h3> CVE-2023-33770 - "RealtyX SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2023-33770 <br> <strong>Published : </strong> May 6, 2025, 5:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-33770"> read more </a> </article> <hr> <article> <h3> CVE-2025-22476 - Dell Storage Center Dell Storage Manager Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-22476 <br> <strong>Published : </strong> May 6, 2025, 5:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22476"> read more </a> </article> <hr> <article> <h3> CVE-2025-26262 - R-fx Networks Linux Malware Detect Arbitrary Code Execution and Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-26262 <br> <strong>Published : </strong> May 6, 2025, 5:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>An issue in the component /internals/functions of R-fx Networks Linux Malware Detect v1.6.5 allows attackers to escalate privileges and execute arbitrary code via supplying a file that contains a crafted filename. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26262"> read more </a> </article> <hr> <article> <h3> 2024, une année marquée par un nombre record de violations de données personnelles </h3> <p><p>Free, France Travail, Viamedis et Almerys, Boulanger, Cultura… L’année 2024 aura été incontestablement marquée par un nombre record de violations de données personnelles, dont certaines très massives, concernant des dizaines de millions de Français.</p> </p> <p class="feed-time"> Tue, 06 May 2025 16:53:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/2024-violations-donnees-personnelles"> read more </a> </article> <hr> <article> <h3> CVE-2025-45487 - Linksys E5600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45487 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45487"> read more </a> </article> <hr> <article> <h3> CVE-2025-45488 - Linksys E5600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45488 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45488"> read more </a> </article> <hr> <article> <h3> CVE-2025-45489 - Linksys E5600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45489 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45489"> read more </a> </article> <hr> <article> <h3> CVE-2025-45490 - Linksys E5600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45490 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45490"> read more </a> </article> <hr> <article> <h3> CVE-2025-45491 - Linksys E5600 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45491 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45491"> read more </a> </article> <hr> <article> <h3> CVE-2025-45492 - Netgear EX8000 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45492 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45492"> read more </a> </article> <hr> <article> <h3> CVE-2025-4363 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4363 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=end_membership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4363"> read more </a> </article> <hr> <article> <h3> CVE-2025-4368 - Tenda AC8 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4368 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetRouterStatus of the file /goform/MtuSetMacWan. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4368"> read more </a> </article> <hr> <article> <h3> CVE-2025-4384 - PcVue MQTT Certificate Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4384 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 4 hours, 12 minutes ago <br> <strong>Description : </strong>The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the risk for random devices to take advantage of this flaw. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4384"> read more </a> </article> <hr> <article> <h3> CVE-2025-22477 - Dell Storage Center Dell Storage Manager Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-22477 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 2 hours, 12 minutes ago <br> <strong>Description : </strong>Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges. <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22477"> read more </a> </article> <hr> <article> <h3> CVE-2025-22478 - Dell Storage Center - Dell Storage Manager XML External Entity Reference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22478 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 2 hours, 12 minutes ago <br> <strong>Description : </strong>Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22478"> read more </a> </article> <hr> <article> <h3> CVE-2025-22479 - Dell Storage Center - Dell Storage Manager Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22479 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 2 hours, 12 minutes ago <br> <strong>Description : </strong>Dell Storage Center - Dell Storage Manager, version(s) 20.0.21, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22479"> read more </a> </article> <hr> <article> <h3> CVE-2025-23379 - Dell Storage Center - Dell Storage Manager Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-23379 <br> <strong>Published : </strong> May 6, 2025, 4:15 p.m. | 2 hours, 12 minutes ago <br> <strong>Description : </strong>Dell Storage Center - Dell Storage Manager, version(s) 21.0.20, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23379"> read more </a> </article> <hr> <article> <h3> CVE-2025-4362 - iSourcecode Gym Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4362 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_membership. The manipulation of the argument member_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4362"> read more </a> </article> <hr> <article> <h3> CVE-2025-4373 - GLib Integer Overflow Buffer Underwrite </h3> <p> <strong>CVE ID : </strong>CVE-2025-4373 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4373"> read more </a> </article> <hr> <article> <h3> CVE-2025-4374 - Quay Unauthorized Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4374 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4374"> read more </a> </article> <hr> <article> <h3> CVE-2025-2898 - IBM Maximo Application Suite Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2898 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 35 minutes ago <br> <strong>Description : </strong>IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access Control (RBAC) configurations. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2898"> read more </a> </article> <hr> <article> <h3> CVE-2025-46814 - FastAPI Guard HTTP Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46814 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 35 minutes ago <br> <strong>Description : </strong>FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially inject arbitrary IP addresses into the request. This vulnerability can allow attackers to bypass IP-based access controls, mislead logging systems, and impersonate trusted clients. It is especially impactful when the application relies on the X-Forwarded-For header for IP-based authorization or authentication. Users should upgrade to FastAPI Guard version 2.0.0 to receive a fix. <br> <strong>Severity:</strong> 3.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46814"> read more </a> </article> <hr> <article> <h3> CVE-2025-4360 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4360 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 35 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_member.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4360"> read more </a> </article> <hr> <article> <h3> CVE-2025-4361 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4361 <br> <strong>Published : </strong> May 6, 2025, 3:16 p.m. | 35 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects an unknown part of the file /department.php. The manipulation of the argument departmentname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4361"> read more </a> </article> <hr> <article> <h3> CVE-2025-4356 - Tenda DAP-1520 Stack-Based Buffer Overflow in Authentication Handler </h3> <p> <strong>CVE ID : </strong>CVE-2025-4356 <br> <strong>Published : </strong> May 6, 2025, 2:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4356"> read more </a> </article> <hr> <article> <h3> CVE-2025-4357 - Tenda RX3 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4357 <br> <strong>Published : </strong> May 6, 2025, 2:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4357"> read more </a> </article> <hr> <article> <h3> CVE-2025-4358 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4358 <br> <strong>Published : </strong> May 6, 2025, 2:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4358"> read more </a> </article> <hr> <article> <h3> CVE-2025-4359 - iSourcecode Gym Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4359 <br> <strong>Published : </strong> May 6, 2025, 2:15 p.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4359"> read more </a> </article> <hr> <article> <h3> CVE-2018-1359 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2018-1359 <br> <strong>Published : </strong> May 6, 2025, 1:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2018-1359"> read more </a> </article> <hr> <article> <h3> CVE-2025-4354 - Tenda DAP-1520 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4354 <br> <strong>Published : </strong> May 6, 2025, 1:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4354"> read more </a> </article> <hr> <article> <h3> CVE-2025-4355 - Tenda DAP-1520 Heap-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4355 <br> <strong>Published : </strong> May 6, 2025, 1:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4355"> read more </a> </article> <hr> <article> <h3> CVE-2025-0984 - Netoloji Software E-Flow Cross-site Scripting (XSS) and File Content Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0984 <br> <strong>Published : </strong> May 6, 2025, 12:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection.This issue affects E-Flow: before 3.23.00. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0984"> read more </a> </article> <hr> <article> <h3> CVE-2025-4349 - "Critical Command Injection in D-Link DIR-600L" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4349 <br> <strong>Published : </strong> May 6, 2025, 12:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4349"> read more </a> </article> <hr> <article> <h3> CVE-2025-4350 - D-Link DIR-600L Wake-on-LAN Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4350 <br> <strong>Published : </strong> May 6, 2025, 12:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wake_on_lan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4350"> read more </a> </article> <hr> <article> <h3> CVE-2025-4352 - Golden Link Secondary System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4352 <br> <strong>Published : </strong> May 6, 2025, 12:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTradeId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4352"> read more </a> </article> <hr> <article> <h3> CVE-2025-4353 - Golden Link Secondary System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4353 <br> <strong>Published : </strong> May 6, 2025, 12:15 p.m. | 3 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4353"> read more </a> </article> <hr> <article> <h3> CVE-2025-40622 - TCMAN GIM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40622 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’ parameter of the ‘GetLastDatePasswordChange’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40622"> read more </a> </article> <hr> <article> <h3> CVE-2025-40623 - TCMAN GIM SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-40623 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘Sender’ and “email” parameters of the ‘createNotificationAndroid’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40623"> read more </a> </article> <hr> <article> <h3> CVE-2025-40624 - TCMAN's GIM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40624 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ and “email” parameters of the ‘updatePassword’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40624"> read more </a> </article> <hr> <article> <h3> CVE-2025-40625 - TCMAN GIM Unauthenticated File Upload RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-40625 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40625"> read more </a> </article> <hr> <article> <h3> CVE-2025-4347 - D-Link DIR-600L Critical FormWlSiteSurvey Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4347 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been declared as critical. Affected by this vulnerability is the function formWlSiteSurvey. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4347"> read more </a> </article> <hr> <article> <h3> CVE-2025-4348 - D-Link DIR-600L L2TP Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4348 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 4 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the function formSetWanL2TP. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4348"> read more </a> </article> <hr> <article> <h3> CVE-2025-40620 - TCMAN's GIM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40620 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ parameter of the ‘ValidateUserAndWS’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40620"> read more </a> </article> <hr> <article> <h3> CVE-2025-40621 - TCMAN GIM SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-40621 <br> <strong>Published : </strong> May 6, 2025, 11:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ parameter of the ‘ValidateUserAndGetData’ endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40621"> read more </a> </article> <hr> <article> <h3> CVE-2025-2011 - WordPress Slider Popup Builder by Depicter SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2011 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2011"> read more </a> </article> <hr> <article> <h3> CVE-2025-3782 - Cision Block Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3782 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3782"> read more </a> </article> <hr> <article> <h3> CVE-2025-46762 - Apache Parquet Parquet-avro Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46762 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be executed. The exploit is only applicable if the client code of parquet-avro uses the "specific" or the "reflect" models deliberately for reading Parquet files. ("generic" model is not impacted) Users are recommended to upgrade to 1.15.2 or set the system property "org.apache.parquet.avro.SERIALIZABLE_PACKAGES" to an empty string on 1.15.1. Both are sufficient to fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46762"> read more </a> </article> <hr> <article> <h3> CVE-2025-4344 - D-Link DIR-600L Remote Buffer Overflow in formLogin </h3> <p> <strong>CVE ID : </strong>CVE-2025-4344 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function formLogin. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4344"> read more </a> </article> <hr> <article> <h3> CVE-2025-4345 - D-Link DIR-600L Remote FormSetLog Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4345 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. This issue affects the function formSetLog. The manipulation of the argument host leads to buffer overflow. The attack may be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4345"> read more </a> </article> <hr> <article> <h3> CVE-2025-4346 - D-Link DIR-600L Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4346 <br> <strong>Published : </strong> May 6, 2025, 10:15 a.m. | 3 hours, 20 minutes ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been classified as critical. Affected is the function formSetWAN_Wizard534. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4346"> read more </a> </article> <hr> <article> <h3> CVE-2025-4341 - D-Link DIR-880L Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4341 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4341"> read more </a> </article> <hr> <article> <h3> CVE-2025-4342 - D-Link DIR-600L Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4342 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4342"> read more </a> </article> <hr> <article> <h3> CVE-2025-4343 - D-Link DIR-600L Remote Buffer Overflow in formEasySetupWizard </h3> <p> <strong>CVE ID : </strong>CVE-2025-4343 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4343"> read more </a> </article> <hr> <article> <h3> CVE-2025-21470 - Apache Image Toolkit Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21470 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21470"> read more </a> </article> <hr> <article> <h3> CVE-2025-21475 - Apache Struts Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21475 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>Memory corruption while processing escape code, when DisplayId is passed with large unsigned value. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21475"> read more </a> </article> <hr> <article> <h3> CVE-2025-22886 - Apache OpenHarmony Memory Leak Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-22886 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22886"> read more </a> </article> <hr> <article> <h3> CVE-2025-25052 - OpenHarmony Buffer Overflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-25052 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25052"> read more </a> </article> <hr> <article> <h3> CVE-2025-25218 - OpenHarmony NULL Pointer Dereference DOS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25218 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25218"> read more </a> </article> <hr> <article> <h3> CVE-2025-27132 - OpenHarmony Out-of-Bounds Write Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-27132 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27132"> read more </a> </article> <hr> <article> <h3> CVE-2025-27241 - OpenHarmony NULL Pointer Dereference Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27241 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27241"> read more </a> </article> <hr> <article> <h3> CVE-2025-27248 - Huawei OpenHarmony NULL Pointer Dereference DOS </h3> <p> <strong>CVE ID : </strong>CVE-2025-27248 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27248"> read more </a> </article> <hr> <article> <h3> CVE-2024-49835 - Apple Safari Heap Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2024-49835 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while reading secure file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49835"> read more </a> </article> <hr> <article> <h3> CVE-2024-49841 - VMware ESXi Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49841 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49841"> read more </a> </article> <hr> <article> <h3> CVE-2024-49842 - Microsoft Hyper-V Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49842 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49842"> read more </a> </article> <hr> <article> <h3> CVE-2024-49844 - Microsoft PlayReady Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49844 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while triggering commands in the PlayReady Trusted application. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49844"> read more </a> </article> <hr> <article> <h3> CVE-2024-49845 - Microsoft Windows FRS Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49845 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption during the FRS UDS generation process. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49845"> read more </a> </article> <hr> <article> <h3> CVE-2024-49846 - Qualcomm MSM Modem Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49846 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while decoding of OTA messages from T3448 IE. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49846"> read more </a> </article> <hr> <article> <h3> CVE-2024-49847 - Vulnerability Title: Oracle Transportation Management DOS </h3> <p> <strong>CVE ID : </strong>CVE-2024-49847 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49847"> read more </a> </article> <hr> <article> <h3> CVE-2025-21453 - Adobe Flash Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21453 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21453"> read more </a> </article> <hr> <article> <h3> CVE-2025-21459 - Microsoft Linksys Wireless Router Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21459 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Transient DOS while parsing per STA profile in ML IE. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21459"> read more </a> </article> <hr> <article> <h3> CVE-2025-21460 - VMware Guest VM Heap Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21460 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21460"> read more </a> </article> <hr> <article> <h3> CVE-2025-21462 - QNAP QTS Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21462 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21462"> read more </a> </article> <hr> <article> <h3> CVE-2025-21467 - Cisco Router Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21467 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while reading the FW response from the shared queue. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21467"> read more </a> </article> <hr> <article> <h3> CVE-2025-21468 - Cisco Firewall Memory Corruption Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21468 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21468"> read more </a> </article> <hr> <article> <h3> CVE-2025-21469 - Apache HTTP Server Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-21469 <br> <strong>Published : </strong> May 6, 2025, 9:15 a.m. | 34 minutes ago <br> <strong>Description : </strong>Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21469"> read more </a> </article> <hr> <article> <h3> CVE-2025-4324 - MRCMS Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4324 <br> <strong>Published : </strong> May 6, 2025, 6:15 a.m. | 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in MRCMS 3.1.2. This affects an unknown part of the file /admin/link/edit.do of the component External Link Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4324"> read more </a> </article> <hr> <article> <h3> CVE-2025-4325 - MRCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4325 <br> <strong>Published : </strong> May 6, 2025, 6:15 a.m. | 36 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in MRCMS 3.1.2 and classified as problematic. This vulnerability affects unknown code of the file /admin/category/add.do of the component Category Management Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4325"> read more </a> </article> <hr> <article> <h3> CVE-2025-4326 - MRCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4326 <br> <strong>Published : </strong> May 6, 2025, 6:15 a.m. | 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in MRCMS 3.1.2 and classified as problematic. This issue affects some unknown processing of the file /admin/chip/add.do of the component Add Fragment Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4326"> read more </a> </article> <hr> <article> <h3> CVE-2025-2802 - WordPress LayoutBoxx Plugin Shortcode Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2802 <br> <strong>Published : </strong> May 6, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>The LayoutBoxx plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.3.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2802"> read more </a> </article> <hr> <article> <h3> CVE-2025-4313 - SourceCodester Advanced Web Store SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4313 <br> <strong>Published : </strong> May 6, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin_addnew_product.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4313"> read more </a> </article> <hr> <article> <h3> CVE-2025-4314 - SourceCodester Advanced Web Store SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4314 <br> <strong>Published : </strong> May 6, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4314"> read more </a> </article> <hr> <article> <h3> CVE-2025-4323 - Apache MRCMS Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4323 <br> <strong>Published : </strong> May 6, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4323"> read more </a> </article> <hr> <article> <h3> CVE-2025-4337 - "WordPress AHAthat Plugin CSRF Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4337 <br> <strong>Published : </strong> May 6, 2025, 5:15 a.m. | 1 hour, 36 minutes ago <br> <strong>Description : </strong>The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due to missing or incorrect nonce validation on the aha_plugin_page() function. This makes it possible for unauthenticated attackers to delete AHA pages via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4337"> read more </a> </article> <hr> <article> <h3> CVE-2023-46716 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2023-46716 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-46716"> read more </a> </article> <hr> <article> <h3> CVE-2025-47296 - Apache HTTP Server Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-47296 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47296"> read more </a> </article> <hr> <article> <h3> CVE-2025-47297 - OpenVAS Scanner Information Disclosure Vulnerability in OpenVAS </h3> <p> <strong>CVE ID : </strong>CVE-2025-47297 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47297"> read more </a> </article> <hr> <article> <h3> CVE-2025-47298 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47298 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47298"> read more </a> </article> <hr> <article> <h3> CVE-2025-47299 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47299 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47299"> read more </a> </article> <hr> <article> <h3> CVE-2025-47300 - Apache HTTP Server Cross-Site Request Forgery (CSRF) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47300 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47300"> read more </a> </article> <hr> <article> <h3> CVE-2025-47301 - Cisco Router Unvalidated Redirect </h3> <p> <strong>CVE ID : </strong>CVE-2025-47301 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47301"> read more </a> </article> <hr> <article> <h3> CVE-2025-47302 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-47302 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47302"> read more </a> </article> <hr> <article> <h3> CVE-2025-47303 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-47303 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47303"> read more </a> </article> <hr> <article> <h3> CVE-2025-4309 - PHPGurukul Art Gallery Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4309 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-art-type.php. The manipulation of the argument arttype leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4309"> read more </a> </article> <hr> <article> <h3> CVE-2025-4310 - iSourcecode Content Management System Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4310 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/add_topic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4310"> read more </a> </article> <hr> <article> <h3> CVE-2025-4311 - iSourcecode Content Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4311 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/update_main_topic_img.php?topic_id=529. The manipulation of the argument stopic_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4311"> read more </a> </article> <hr> <article> <h3> CVE-2025-4312 - SourceCodester Advanced Web Store SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4312 <br> <strong>Published : </strong> May 6, 2025, 4:16 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4312"> read more </a> </article> <hr> <article> <h3> CVE-2021-43069 - Apache HTTP Server Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2021-43069 <br> <strong>Published : </strong> May 6, 2025, 4:15 a.m. | 2 hours, 36 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-43069"> read more </a> </article> <hr> <article> <h3> CVE-2025-4306 - PHPGurukul Nipah Virus Testing Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4306 <br> <strong>Published : </strong> May 6, 2025, 3:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4306"> read more </a> </article> <hr> <article> <h3> CVE-2025-4307 - PHPGurukul Art Gallery Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4307 <br> <strong>Published : </strong> May 6, 2025, 3:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/add-art-medium.php. The manipulation of the argument artmed leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4307"> read more </a> </article> <hr> <article> <h3> CVE-2025-4308 - PHPGurukul Art Gallery Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4308 <br> <strong>Published : </strong> May 6, 2025, 3:15 a.m. | 3 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-art-type.php. The manipulation of the argument arttype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4308"> read more </a> </article> <hr> <article> <h3> CVE-2025-3609 - Reales WP STPT Unauthorized User Registration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3609 <br> <strong>Published : </strong> May 6, 2025, 3:15 a.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>The Reales WP STPT plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 2.1.2. This is due to the 'reales_user_signup_form' AJAX action not verifying if user registration is enabled, prior to registering a user. This makes it possible for unauthenticated attackers to create new user accounts, which can be leveraged with CVE-XX to achieve privilege escalation. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3609"> read more </a> </article> <hr> <article> <h3> CVE-2025-3610 - Reales WP STPT Privilege Escalation and Account Takeover Vulnerability in WordPress </h3> <p> <strong>CVE ID : </strong>CVE-2025-3610 <br> <strong>Published : </strong> May 6, 2025, 3:15 a.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>The Reales WP STPT plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.1.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's passwords and email addresses, including administrators, and leverage that to gain access to their account. This can be combined with CVE-2025-3609 to achieve remote code execution as an originally unauthenticated user with no account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3610"> read more </a> </article> <hr> <article> <h3> CVE-2025-4305 - Kefaming Mayi Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4305 <br> <strong>Published : </strong> May 6, 2025, 2:15 a.m. | 3 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4305"> read more </a> </article> <hr> <article> <h3> CVE-2024-39442 - Sprd SSense Service Missing Permission Check Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-39442 <br> <strong>Published : </strong> May 6, 2025, 2:15 a.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>In sprd ssense service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-39442"> read more </a> </article> <hr> <article> <h3> CVE-2025-4304 - PHPGurukul Cyber Cafe Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4304 <br> <strong>Published : </strong> May 6, 2025, 2:15 a.m. | 1 hour, 34 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of the file /adminprofile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4304"> read more </a> </article> <hr> <article> <h3> CVE-2025-2509 - ChromeOS Virglrenderer Out-of-Bounds Read VM Escape </h3> <p> <strong>CVE ID : </strong>CVE-2025-2509 <br> <strong>Published : </strong> May 6, 2025, 1:15 a.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2509"> read more </a> </article> <hr> <article> <h3> CVE-2025-46728 - cpp-httplib Chunked Request Body Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46728 <br> <strong>Published : </strong> May 6, 2025, 1:15 a.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce configured size limits on incoming request bodies when `Transfer-Encoding: chunked` is used or when no `Content-Length` header is provided. A remote attacker can send a chunked request without the terminating zero-length chunk, causing uncontrolled memory allocation on the server. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.20.1 fixes the issue by enforcing limits during parsing. If the limit is exceeded at any point during reading, the connection is terminated immediately. A short-term workaround through a Reverse Proxy is available. If updating the library immediately is not feasible, deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the `cpp-httplib` application. Configure the proxy to enforce maximum request body size limits, thereby stopping excessively large requests before they reach the vulnerable library code. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46728"> read more </a> </article> <hr> <article> <h3> CVE-2025-4301 - iSourcecode Content Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4301 <br> <strong>Published : </strong> May 6, 2025, 1:15 a.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4301"> read more </a> </article> <hr> <article> <h3> CVE-2025-4303 - PHPGurukul Human Metapneumovirus Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4303 <br> <strong>Published : </strong> May 6, 2025, 1:15 a.m. | 2 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4303"> read more </a> </article> <hr> <article> <h3> CVE-2025-4298 - Tenda AC1206 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4298 <br> <strong>Published : </strong> May 6, 2025, 12:15 a.m. | 3 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4298"> read more </a> </article> <hr> <article> <h3> CVE-2025-4299 - Tenda AC1206 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4299 <br> <strong>Published : </strong> May 6, 2025, 12:15 a.m. | 3 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4299"> read more </a> </article> <hr> <article> <h3> CVE-2025-4300 - iSourcecode Content Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4300 <br> <strong>Published : </strong> May 6, 2025, 12:15 a.m. | 3 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unknown function of the file /search_list.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 06 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4300"> read more </a> </article> <hr> <article> <h3> CVE-2025-4292 - MRCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4292 <br> <strong>Published : </strong> May 5, 2025, 11:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in MRCMS 3.1.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/user/edit.do of the component Edit User Page. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4292"> read more </a> </article> <hr> <article> <h3> CVE-2025-4293 - MRCMS Cross-Site Scripting Vulnerability in Group Edit Page </h3> <p> <strong>CVE ID : </strong>CVE-2025-4293 <br> <strong>Published : </strong> May 5, 2025, 11:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in MRCMS 3.1.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/group/edit.do of the component Group Edit Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4293"> read more </a> </article> <hr> <article> <h3> CVE-2025-4297 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4297 <br> <strong>Published : </strong> May 5, 2025, 11:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/change-password.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4297"> read more </a> </article> <hr> <article> <h3> CVE-2025-44071 - SeaCMS Phomebak PHP Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44071 <br> <strong>Published : </strong> May 5, 2025, 10:15 p.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44071"> read more </a> </article> <hr> <article> <h3> CVE-2025-44072 - SeaCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44072 <br> <strong>Published : </strong> May 5, 2025, 10:15 p.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44072"> read more </a> </article> <hr> <article> <h3> CVE-2025-44074 - SeaCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44074 <br> <strong>Published : </strong> May 5, 2025, 10:15 p.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44074"> read more </a> </article> <hr> <article> <h3> CVE-2025-4290 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4290 <br> <strong>Published : </strong> May 5, 2025, 10:15 p.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SMNT Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4290"> read more </a> </article> <hr> <article> <h3> CVE-2025-4291 - IdeaCMS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4291 <br> <strong>Published : </strong> May 5, 2025, 10:15 p.m. | 5 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in IdeaCMS up to 1.6. Affected is the function saveUpload. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4291"> read more </a> </article> <hr> <article> <h3> CVE-2025-4288 - PCMan FTP Server RNFR Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4288 <br> <strong>Published : </strong> May 5, 2025, 9:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RNFR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4288"> read more </a> </article> <hr> <article> <h3> CVE-2025-4289 - PCMan FTP Server RNTO Command Handler Critical Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4289 <br> <strong>Published : </strong> May 5, 2025, 9:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component RNTO Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4289"> read more </a> </article> <hr> <article> <h3> CVE-2025-0915 - IBM Db2 Memory Allocation DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0915 <br> <strong>Published : </strong> May 5, 2025, 9:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0915"> read more </a> </article> <hr> <article> <h3> CVE-2025-1000 - IBM Db2 Denial of Service due to Improper Automatic Client Rerouting </h3> <p> <strong>CVE ID : </strong>CVE-2025-1000 <br> <strong>Published : </strong> May 5, 2025, 9:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1000"> read more </a> </article> <hr> <article> <h3> CVE-2025-1493 - IBM Db2 Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-1493 <br> <strong>Published : </strong> May 5, 2025, 9:15 p.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1493"> read more </a> </article> <hr> <article> <h3> CVE-2025-46731 - Craft CMS SSTI Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46731 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be enabled for this to work. Users should update to the patched versions 4.14.13 or 5.6.15 to mitigate the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46731"> read more </a> </article> <hr> <article> <h3> CVE-2025-46734 - League Commonmark Attributes Extension Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46734 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of the league/commonmark library (versions 1.5.0 through 2.6.x) allows remote attackers to insert malicious JavaScript calls into HTML. The league/commonmark library provides configuration options such as `html_input: 'strip'` and `allow_unsafe_links: false` to mitigate cross-site scripting (XSS) attacks by stripping raw HTML and disallowing unsafe links. However, when the Attributes Extension is enabled, it introduces a way for users to inject arbitrary HTML attributes into elements via Markdown syntax using curly braces. Version 2.7.0 contains three changes to prevent this XSS attack vector: All attributes starting with `on` are considered unsafe and blocked by default; support for an explicit allowlist of allowed HTML attributes; and manually-added `href` and `src` attributes now respect the existing `allow_unsafe_links` configuration option. If upgrading is not feasible, please consider disabling the `AttributesExtension` for untrusted users and/or filtering the rendered HTML through a library like HTMLPurifier. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46734"> read more </a> </article> <hr> <article> <h3> CVE-2025-46813 - Discourse Data Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46813 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>Discourse is an open-source community platform. A data leak vulnerability affects sites deployed between commits 10df7fdee060d44accdee7679d66d778d1136510 and 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b. On login-required sites, the leak meant that some content on the site's homepage could be visible to unauthenticated users. Only login-required sites that got deployed during this timeframe are affected, roughly between April 30 2025 noon EDT and May 2 2025, noon EDT. Sites on the stable branch are unaffected. Private content on an instance's homepage could be visible to unauthenticated users on login-required sites. Versions of 3.5.0.beta4 after commit 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b are not vulnerable to the issue. No workarounds are available. Sites must upgrade to a non-vulnerable version of Discourse. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46813"> read more </a> </article> <hr> <article> <h3> CVE-2025-4286 - "Intelbras InControl Credential Storage Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4286 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4286"> read more </a> </article> <hr> <article> <h3> CVE-2025-4287 - PyTorch CUDA NCCL Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4287 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is identified as 5827d2061dcb4acd05ac5f8e65d8693a481ba0f5. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4287"> read more </a> </article> <hr> <article> <h3> CVE-2025-45617 - Production SSM User List Unrestricted Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-45617 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /user/list of production_ssm v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45617"> read more </a> </article> <hr> <article> <h3> CVE-2025-45618 - Jeeweb Mybatis Springboot Unauthenticated Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-45618 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45618"> read more </a> </article> <hr> <article> <h3> CVE-2025-46726 - Langroid XMLToolMessage XML External Entity (XXE) Denial of Service (DoS) and Local File Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46726 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46726"> read more </a> </article> <hr> <article> <h3> CVE-2025-46730 - "MobSF ZIP Bomb Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46730 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 4 hours, 36 minutes ago <br> <strong>Description : </strong>MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web applications. Access to the MobSF web interface is often granted to internal security teams, audit teams, and external vendors. MobSF provides a feature that allows users to upload ZIP files for static analysis. Upon upload, these ZIP files are automatically extracted and stored within the MobSF directory. However, in versions up to and including 4.3.2, this functionality lacks a check on the total uncompressed size of the ZIP file, making it vulnerable to a ZIP of Death (zip bomb) attack. Due to the absence of safeguards against oversized extractions, an attacker can craft a specially prepared ZIP file that is small in compressed form but expands to a massive size upon extraction. Exploiting this, an attacker can exhaust the server's disk space, leading to a complete denial of service (DoS) not just for MobSF, but also for any other applications or websites hosted on the same server. This vulnerability can lead to complete server disruption in an organization which can affect other internal portals and tools too (which are hosted on the same server). If some organization has created their customized cloud based mobile security tool using MobSF core then an attacker can exploit this vulnerability to crash their servers. Commit 6987a946485a795f4fd38cebdb4860b368a1995d fixes this issue. As an additional mitigation, it is recommended to implement a safeguard that checks the total uncompressed size of any uploaded ZIP file before extraction. If the estimated uncompressed size exceeds a safe threshold (e.g., 100 MB), MobSF should reject the file and notify the user. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46730"> read more </a> </article> <hr> <article> <h3> CVE-2025-1909 - BuddyBoss Platform Pro WordPress Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1909 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1909"> read more </a> </article> <hr> <article> <h3> CVE-2025-45607 - Itranswarp Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45607 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45607"> read more </a> </article> <hr> <article> <h3> CVE-2025-45608 - Xinguan Access Control Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-45608 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45608"> read more </a> </article> <hr> <article> <h3> CVE-2025-45609 - Kob Insecure Direct Object Reference (IDOR) </h3> <p> <strong>CVE ID : </strong>CVE-2025-45609 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45609"> read more </a> </article> <hr> <article> <h3> CVE-2025-45610 - PassJava-Platform Blind File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45610 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45610"> read more </a> </article> <hr> <article> <h3> CVE-2025-45611 - Hope-Boot Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-45611 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45611"> read more </a> </article> <hr> <article> <h3> CVE-2025-45612 - Xmall Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-45612 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45612"> read more </a> </article> <hr> <article> <h3> CVE-2025-45613 - Shiro-Action Unsecured Data Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-45613 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45613"> read more </a> </article> <hr> <article> <h3> CVE-2025-45614 - One API User Manager Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-45614 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45614"> read more </a> </article> <hr> <article> <h3> CVE-2025-45615 - Yaoqishan Unauthenticated Administrative Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-45615 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45615"> read more </a> </article> <hr> <article> <h3> CVE-2025-45616 - Brcc Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45616 <br> <strong>Published : </strong> May 5, 2025, 8:15 p.m. | 1 hour, 32 minutes ago <br> <strong>Description : </strong>Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45616"> read more </a> </article> <hr> <article> <h3> CVE-2024-42212 - HCL BigFix Compliance CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42212 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42212"> read more </a> </article> <hr> <article> <h3> CVE-2024-42213 - HCL BigFix Compliance Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-42213 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42213"> read more </a> </article> <hr> <article> <h3> CVE-2025-29573 - Mezzanine CMS Forms Module XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29573 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29573"> read more </a> </article> <hr> <article> <h3> CVE-2025-43849 - Apache TTS Voice Conversion Framework Deserialization RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-43849 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_a and cpkt_b variables take user input (e.g. a path to a model) and pass it to the merge function in process_ckpt.py, which uses them to load the models on those paths with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43849"> read more </a> </article> <hr> <article> <h3> CVE-2025-43850 - Apache Retrieval-Based Voice Conversion WebUI Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-43850 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_dir variable takes user input (e.g. a path to a model) and passes it to the change_info function in export.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43850"> read more </a> </article> <hr> <article> <h3> CVE-2025-43851 - Adobe Retrieval-based-Voice-Conversion-WebUI Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43851 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , a new instance of AudioPre class is created with the model_path attribute containing the aformentioned user input. In the AudioPre class, the user input, is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43851"> read more </a> </article> <hr> <article> <h3> CVE-2025-43852 - Apache Retrieval-based-Voice-Conversion-WebUI Deserialization Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43852 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , if model_name contains the string "DeEcho", a new instance of AudioPreDeEcho class is created with the model_path attribute containing the aforementioned user input. In the AudioPreDeEcho class, the user input is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43852"> read more </a> </article> <hr> <article> <h3> CVE-2025-46335 - MobSF Stored XSS Vulnerability in Android APK Analysis </h3> <p> <strong>CVE ID : </strong>CVE-2025-46335 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. A Stored Cross-Site Scripting (XSS) vulnerability has been identified in MobSF versions up to and including 4.3.2. The vulnerability arises from improper sanitization of user-supplied SVG files during the Android APK analysis workflow. Version 4.3.3 fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46335"> read more </a> </article> <hr> <article> <h3> CVE-2025-46340 - Misskey CSS Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46340 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the validation performed in `UrlPreviewService` and `MkUrlPreview`, it is possible for an attacker to inject arbitrary CSS into the `MkUrlPreview` component. `UrlPreviewService.wrap` falls back to returning the original URL if it's using a protocol that is likely to not be understood by Misskey, IE something other than `http` or `https`. This both can de-anonymize users and_allow further attacks in the client. Additionally, `MkUrlPreview` doesn't escape CSS when applying a `background-image` property, allowing an attacker to craft a URL that applies arbitrary styles to the preview element. Theoretically, an attacker can craft a CSS injection payload to create a fake error message that can deceive the user into giving away their credentials or similar sensitive information. Version 2025.4.1 contains a patch for the issue. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46340"> read more </a> </article> <hr> <article> <h3> CVE-2025-46553 - Misskey/summaly Allow Redirects Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46553 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn't enforced. Misskey will follow redirects, despite explicitly requesting not to. Version 5.2.1 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46553"> read more </a> </article> <hr> <article> <h3> CVE-2025-46559 - Misskey AiScript Cross-Site Request Forgery (CSRF) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46559 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, missing validation in `Mk:api` allows malicious AiScript code to access additional endpoints that it isn't designed to have access to. The missing validation allows malicious AiScript code to prefix a URL with `../` to step out of the `/api` directory, thereby being able to make requests to other endpoints, such as `/files`, `/url`, and `/proxy`. Version 2025.4.1 fixes the issue. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46559"> read more </a> </article> <hr> <article> <h3> CVE-2025-46571 - Open WebUI Unauthenticated JavaScript File Upload to Admin RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-46571 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the `/api/v1/files/` backend endpoint. This endpoint returns a file id, which can be used to open the file in the browser and trigger the JavaScript code in the user's browser. Under the default settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact of this vulnerability. A link to such a file can be sent to an admin, and if clicked, will give the low-privileged user complete control over the admin's account, ultimately enabling RCE via functions. Version 0.6.6 contains a fix for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46571"> read more </a> </article> <hr> <article> <h3> CVE-2025-46719 - Open WebUI JavaScript Injection and Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46719 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's access token and gain full control over their account. Chat transcripts can be shared with other users in the same server, or with the whole open-webui community if "Enable Community Sharing" is enabled in the admin panel. If this exploit is used against an admin user, it is possible to achieve Remote Code Execution on the server where the open-webui backend is hosted. This can be done by creating a new function which contains malicious python code. This vulnerability also affects chat transcripts uploaded to `https://openwebui.com/c/<user>/<chat_id>`, allowing for wormable stored XSS in https[:]//openwebui[.]com. Version 0.6.6 contains a patch for the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46719"> read more </a> </article> <hr> <article> <h3> CVE-2025-46720 - Keystone Node.js Oracle Filter Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46720 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can be bypassed in `update` and `delete` mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields. Specifically, when a mutation includes a `where` clause with multiple unique filters (e.g. `id` and `email`), Keystone will attempt to match records even if filtering by the latter fields would normally be rejected by `field.isFilterable` or `list.defaultIsFilterable`. This can allow malicious actors to infer the presence of a particular field value when a filter is successful in returning a result. This affects any project relying on the default or dynamic `isFilterable` behavior (at the list or field level) to prevent external users from using the filtering of fields as a discovery mechanism. While this access control is respected during `findMany` operations, it was not completely enforced during `update` and `delete` mutations when accepting more than one unique `where` values in filters. This has no impact on projects using `isFilterable: false` or `defaultIsFilterable: false` for sensitive fields, or for those who have otherwise omitted filtering by these fields from their GraphQL schema. This issue has been patched in `@keystone-6/core` version 6.5.0. To mitigate this issue in older versions where patching is not a viable pathway, set `isFilterable: false` statically for relevant fields to prevent filtering by them earlier in the access control pipeline (that is, don't use functions); set `{field}.graphql.omit.read: true` for relevant fields, which implicitly removes filtering by these fields from the GraphQL schema; and/or deny `update` and `delete` operations for the relevant lists completely. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46720"> read more </a> </article> <hr> <article> <h3> CVE-2025-4279 - WordPress External Image Replace Plugin Remote File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4279 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'external_image_replace_get_posts::replace_post' function in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4279"> read more </a> </article> <hr> <article> <h3> CVE-2025-4283 - SourceCodester Oretnom23 Stock Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4283 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4283"> read more </a> </article> <hr> <article> <h3> CVE-2025-4318 - Amazon Amplify Studio Unvalidated Property Expression Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4318 <br> <strong>Published : </strong> May 5, 2025, 7:15 p.m. | 18 minutes ago <br> <strong>Description : </strong>The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4318"> read more </a> </article> <hr> <article> <h3> CVE-2025-45237 - DBSyncer Unsecured Configuration File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45237 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45237"> read more </a> </article> <hr> <article> <h3> CVE-2025-45238 - Foxcms File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45238 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45238"> read more </a> </article> <hr> <article> <h3> CVE-2025-45239 - FoxCMS Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45239 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45239"> read more </a> </article> <hr> <article> <h3> CVE-2025-4050 - Google Chrome Heap Corruption Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4050 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4050"> read more </a> </article> <hr> <article> <h3> CVE-2025-4051 - Google Chrome DevTools Insufficient Data Validation Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-4051 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4051"> read more </a> </article> <hr> <article> <h3> CVE-2025-4052 - Google Chrome DevTools Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4052 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4052"> read more </a> </article> <hr> <article> <h3> CVE-2025-4096 - Google Chrome Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4096 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4096"> read more </a> </article> <hr> <article> <h3> CVE-2025-4282 - SourceCodester Oretnom23 Stock Management System CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4282 <br> <strong>Published : </strong> May 5, 2025, 6:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4282"> read more </a> </article> <hr> <article> <h3> CVE-2024-58098 - Linux Kernel BPF Packet Pointer Invalidation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58098 <br> <strong>Published : </strong> May 5, 2025, 3:15 p.m. | 1 hour, 1 minute ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: __attribute__((__noinline__)) long skb_pull_data(struct __sk_buff *sk, __u32 len) { return bpf_skb_pull_data(sk, len); } SEC("tc") int test_invalidate_checks(struct __sk_buff *sk) { int *p = (void *)(long)sk->data; if ((void *)(p + 1) > (void *)(long)sk->data_end) return TCX_DROP; skb_pull_data(sk, 0); *p = 42; return TCX_PASS; } After a call to bpf_skb_pull_data() the pointer 'p' can't be used safely. See function filter.c:bpf_helper_changes_pkt_data() for a list of such helpers. At the moment verifier invalidates packet pointers when processing helper function calls, and does not traverse global sub-programs when processing calls to global sub-programs. This means that calls to helpers done from global sub-programs do not invalidate pointers in the caller state. E.g. the program above is unsafe, but is not rejected by verifier. This commit fixes the omission by computing field bpf_subprog_info->changes_pkt_data for each sub-program before main verification pass. changes_pkt_data should be set if: - subprogram calls helper for which bpf_helper_changes_pkt_data returns true; - subprogram calls a global function, for which bpf_subprog_info->changes_pkt_data should be set. The verifier.c:check_cfg() pass is modified to compute this information. The commit relies on depth first instruction traversal done by check_cfg() and absence of recursive function calls: - check_cfg() would eventually visit every call to subprogram S in a state when S is fully explored; - when S is fully explored: - every direct helper call within S is explored (and thus changes_pkt_data is set if needed); - every call to subprogram S1 called by S was visited with S1 fully explored (and thus S inherits changes_pkt_data from S1). The downside of such approach is that dead code elimination is not taken into account: if a helper call inside global function is dead because of current configuration, verifier would conservatively assume that the call occurs for the purpose of the changes_pkt_data computation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58098"> read more </a> </article> <hr> <article> <h3> CVE-2024-58100 - Linux Kernel bpf Changes_pkt_data Property Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58100 <br> <strong>Published : </strong> May 5, 2025, 3:15 p.m. | 1 hour, 1 minute ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt_data property of the global sub-program. Because of this, an extension program replacing a global sub-program must be compatible with changes_pkt_data property of the sub-program being replaced. This commit: - adds changes_pkt_data flag to struct bpf_prog_aux: - this flag is set in check_cfg() for main sub-program; - in jit_subprogs() for other sub-programs; - modifies bpf_check_attach_btf_id() to check changes_pkt_data flag; - moves call to check_attach_btf_id() after the call to check_cfg(), because it needs changes_pkt_data flag to be set: bpf_check: ... ... - check_attach_btf_id resolve_pseudo_ldimm64 resolve_pseudo_ldimm64 --> bpf_prog_is_offloaded bpf_prog_is_offloaded check_cfg check_cfg + check_attach_btf_id ... ... The following fields are set by check_attach_btf_id(): - env->ops - prog->aux->attach_btf_trace - prog->aux->attach_func_name - prog->aux->attach_func_proto - prog->aux->dst_trampoline - prog->aux->mod - prog->aux->saved_dst_attach_type - prog->aux->saved_dst_prog_type - prog->expected_attach_type Neither of these fields are used by resolve_pseudo_ldimm64() or bpf_prog_offload_verifier_prep() (for netronome and netdevsim drivers), so the reordering is safe. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58100"> read more </a> </article> <hr> <article> <h3> CVE-2024-58237 - Linux Kernel BPF Packet Pointer Invalidation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58237 <br> <strong>Published : </strong> May 5, 2025, 3:15 p.m. | 1 hour, 1 minute ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making the change in bpf_helper_changes_pkt_data() automatically makes use of check_cfg() logic that computes 'changes_pkt_data' effect for global sub-programs, such that the following program could be rejected: int tail_call(struct __sk_buff *sk) { bpf_tail_call_static(sk, &jmp_table, 0); return 0; } SEC("tc") int not_safe(struct __sk_buff *sk) { int *p = (void *)(long)sk->data; ... make p valid ... tail_call(sk); *p = 42; /* this is unsafe */ ... } The tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that can invalidate packet pointers. Otherwise, it can't be freplaced with tailcall_freplace.c:entry_freplace() that does a tail call. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58237"> read more </a> </article> <hr> <article> <h3> CVE-2025-47240 - Apache Unverified Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47240 <br> <strong>Published : </strong> May 5, 2025, 3:15 p.m. | 1 hour, 1 minute ago <br> <strong>Description : </strong>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47240"> read more </a> </article> <hr> <article> <h3> CVE-2025-28168 - Outsystems Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28168 <br> <strong>Published : </strong> May 5, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>Outsystems Multiple File Upload < 3.1.0 is vulnerable to Unrestricted File Upload. The vulnerability is because file extension and size validations are enforced solely on the client side. An attacker can intercept the upload request and modify the parameter to bypass extension restrictions and upload arbitrary files. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28168"> read more </a> </article> <hr> <article> <h3> CVE-2025-45751 - SourceCodester Web Based Pharmacy Product Management System Cross Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-45751 <br> <strong>Published : </strong> May 5, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin.php via the Fullname text field. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45751"> read more </a> </article> <hr> <article> <h3> CVE-2025-47268 - iputils Ping Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47268 <br> <strong>Published : </strong> May 5, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47268"> read more </a> </article> <hr> <article> <h3> CVE-2025-4316 - "Devolutions Server PAM Unauthorized Self-Approval" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4316 <br> <strong>Published : </strong> May 5, 2025, 2:15 p.m. | 2 hours, 2 minutes ago <br> <strong>Description : </strong>Improper access control in PAM feature in Devolutions Server 2025.1.6.0 and earlier allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user interface actions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4316"> read more </a> </article> <hr> <article> <h3> CVE-2025-2545 - "Best Practical Solutions, LLC Request Tracker Triple DES Encryption Weakness" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2545 <br> <strong>Published : </strong> May 5, 2025, 12:15 p.m. | 4 hours, 2 minutes ago <br> <strong>Description : </strong>Vulnerability in Best Practical Solutions, LLC's Request Tracker v5.0.7, where the Triple DES (3DES) cryptographic algorithm is used within SMIME code to encrypt S/MIME emails. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2545"> read more </a> </article> <hr> <article> <h3> The syzygy distinguisher élu best paper award </h3> <p><span class="field field--name-title field--type-string field--label-hidden">The syzygy distinguisher élu best paper award</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-eurocrypt-2025.png?h=284f21b9&itok=XVILu7ct"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu-eurocrypt-2025.png?h=284f21b9&itok=AIlwfJoo"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu-eurocrypt-2025.png?h=284f21b9&itok=lqlDCjUI"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu-eurocrypt-2025.png?h=284f21b9&itok=LMX3N5bl"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-eurocrypt-2025.png?h=284f21b9&itok=XVILu7ct" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-05-05T11:43:47+00:00" title="Lundi 5 Mai 2025 - 11:43" class="datetime">lun 05/05/2025 - 11:43</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">À l’occasion de la conférence Eurocrypt qui se tient à Madrid du 4 au 8 mai, l’International Association for Cryptologic Research (IACR) a remis le Best Paper Award à Hugues Randriam pour ses travaux menés au sein du laboratoire de cryptologie de l’ANSSI.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Cette récompense vient saluer l’article de Hugues Randriam intitulé <em>« The syzygy distinguisher », </em>dont les conclusions représentent une avancée significative dans le domaine du chiffrement asymétrique.</p> <p>L’étude propose en effet un nouvel outil mathématique appelé <em>« syzygy distinguisher »</em>. Déjà utilisé en cryptographie, les distinguisher ont toutefois montré des limites face à certains problèmes complexes de cryptographie. Celui proposé par Hugues dans son papier offre des résultats considérablement supérieurs lorsqu’il s’agit de reconnaître des codes cryptographiques utilisés pour sécuriser les communications, notamment dans le cadre de la cryptographie post-quantique.</p> <p>L’attribution de ce prix constitue une reconnaissance forte des travaux menés par Hugues Randriam et par l’ensemble du laboratoire de cryptographie de l’ANSSI. Elle souligne également l’engagement constant des équipes de l’Agence dans la recherche scientifique.</p> <p>C’est une grande fierté pour l’ANSSI, non seulement pour le rayonnement de ses laboratoires, mais aussi pour le travail mené au quotidien par l’ensemble de ses agents.</p> <p><strong><a href="https://eprint.iacr.org/2024/1193">Version préliminaire du papier</a></strong></p> <p><strong><a href="https://eurocrypt.iacr.org/2025/program.php">Programme de la conférence</a></strong></p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://cyber.gouv.fr/publications/syzygy-distinguisher" se="" rendre="" sur="" consultez="" la="" synth="" de="" l=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Consultez la synthèse de l'article </a> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 05 May 2025 11:43:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/syzygy-distinguisher-elu-best-paper-award"> read more </a> </article> <hr> <article> <h3> CVE-2025-4272 - Mechrevo Control Console DLL Search Path Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4272 <br> <strong>Published : </strong> May 5, 2025, 11:15 a.m. | 5 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4272"> read more </a> </article> <hr> <article> <h3> CVE-2025-2905 - WSO2 API Manager XXE File Disclosure and Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2905 <br> <strong>Published : </strong> May 5, 2025, 9:15 a.m. | 7 hours, 2 minutes ago <br> <strong>Description : </strong>An XML External Entity (XXE) vulnerability exists in the gateway component of WSO2 API Manager due to insufficient validation of XML input in crafted URL paths. User-supplied XML is parsed without appropriate restrictions, enabling external entity resolution. This vulnerability can be exploited by an unauthenticated remote attacker to read files from the server’s filesystem or perform denial-of-service (DoS) attacks. * On systems running JDK 7 or early JDK 8, full file contents may be exposed. * On later versions of JDK 8 and newer, only the first line of a file may be read, due to improvements in XML parser behavior. * DoS attacks such as "Billion Laughs" payloads can cause service disruption. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2905"> read more </a> </article> <hr> <article> <h3> CVE-2025-4270 - TOTOLINK A720R CGI Config Handler Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4270 <br> <strong>Published : </strong> May 5, 2025, 8:15 a.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Config Handler. The manipulation of the argument topicurl with the input getInitCfg/getSysStatusCfg leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4270"> read more </a> </article> <hr> <article> <h3> CVE-2025-4271 - TOTOLINK A720R CGI Argument Injection Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4271 <br> <strong>Published : </strong> May 5, 2025, 8:15 a.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4271"> read more </a> </article> <hr> <article> <h3> CVE-2025-4268 - TOTOLINK A720R Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4268 <br> <strong>Published : </strong> May 5, 2025, 7:15 a.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4268"> read more </a> </article> <hr> <article> <h3> CVE-2025-4269 - TOTOLINK Log Handler Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4269 <br> <strong>Published : </strong> May 5, 2025, 7:15 a.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4269"> read more </a> </article> <hr> <article> <h3> CVE-2025-39363 - AlphaEfficiencyTeam Custom Login and Registration Stored Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39363 <br> <strong>Published : </strong> May 5, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Stored XSS.This issue affects Custom Login and Registration: from n/a through 1.0.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39363"> read more </a> </article> <hr> <article> <h3> CVE-2025-3583 - WordPress Newsletter Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3583 <br> <strong>Published : </strong> May 5, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>The Newsletter WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3583"> read more </a> </article> <hr> <article> <h3> CVE-2025-4266 - PHPGurukul Notice Board System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4266 <br> <strong>Published : </strong> May 5, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php?vid=2. The manipulation of the argument fromdate/tomdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4266"> read more </a> </article> <hr> <article> <h3> CVE-2025-4267 - SourceCodester Oretnom23 Stock Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4267 <br> <strong>Published : </strong> May 5, 2025, 6:15 a.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file /admin/?page=purchase_order/view_po of the component Purchase Order Details Page. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4267"> read more </a> </article> <hr> <article> <h3> CVE-2025-4264 - PHPGurukul Emergency Ambulance Hiring Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4264 <br> <strong>Published : </strong> May 5, 2025, 5:15 a.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/edit-ambulance.php. The manipulation of the argument dconnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4264"> read more </a> </article> <hr> <article> <h3> CVE-2025-4265 - PHPGurukul Emergency Ambulance Hiring Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4265 <br> <strong>Published : </strong> May 5, 2025, 5:15 a.m. | 11 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4265"> read more </a> </article> <hr> <article> <h3> CVE-2025-4262 - "PHPGurukul Online DJ Booking Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4262 <br> <strong>Published : </strong> May 5, 2025, 4:16 a.m. | 12 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4262"> read more </a> </article> <hr> <article> <h3> CVE-2025-4263 - PHPGurukul Online DJ Booking Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4263 <br> <strong>Published : </strong> May 5, 2025, 4:16 a.m. | 12 hours, 1 minute ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4263"> read more </a> </article> <hr> <article> <h3> CVE-2025-4261 - GAIR-NLP Factool Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4261 <br> <strong>Published : </strong> May 5, 2025, 4:15 a.m. | 12 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function run_single of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4261"> read more </a> </article> <hr> <article> <h3> CVE-2025-4260 - Zhangyanbo2007 Youkefu Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4260 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 13 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsave of the file m\web\handler\admin\system\TemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4260"> read more </a> </article> <hr> <article> <h3> CVE-2025-20665 - Samsung Android SELinux Policy Missing Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20665 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20665"> read more </a> </article> <hr> <article> <h3> CVE-2025-20666 - "Modem Rogue Base Station Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20666 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00650610; Issue ID: MSV-2933. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20666"> read more </a> </article> <hr> <article> <h3> CVE-2025-20667 - Oracle Modem Information Disclosure Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20667 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01513293; Issue ID: MSV-2741. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20667"> read more </a> </article> <hr> <article> <h3> CVE-2025-20668 - "OpenSSH SCP Out-of-Bounds Write Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20668 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09625562; Issue ID: MSV-3027. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20668"> read more </a> </article> <hr> <article> <h3> CVE-2025-20670 - Huawei Modem Certificate Validation Bypass Remote Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20670 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01334347; Issue ID: MSV-2772. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20670"> read more </a> </article> <hr> <article> <h3> CVE-2025-20671 - Thermal Out-of-Bounds Write Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20671 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09698599; Issue ID: MSV-3228. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20671"> read more </a> </article> <hr> <article> <h3> CVE-2025-4259 - Newbee-Mall Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4259 <br> <strong>Published : </strong> May 5, 2025, 3:15 a.m. | 10 hours, 31 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4259"> read more </a> </article> <hr> <article> <h3> CVE-2025-4273 - Intel UEFI Secure Boot Signature Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4273 <br> <strong>Published : </strong> May 5, 2025, 2:15 a.m. | 11 hours, 31 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4273"> read more </a> </article> <hr> <article> <h3> CVE-2025-4258 - Zhangyanbo2007 Youkefu Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4258 <br> <strong>Published : </strong> May 5, 2025, 2:15 a.m. | 8 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the function Upload of the file \youkefu-master\src\main\java\com\ukefu\webim\web\handler\resource\MediaController.java. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4258"> read more </a> </article> <hr> <article> <h3> CVE-2025-4257 - SeaCMS Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4257 <br> <strong>Published : </strong> May 5, 2025, 1:15 a.m. | 9 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /admin_pay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4257"> read more </a> </article> <hr> <article> <h3> CVE-2025-4256 - SeaCMS Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-4256 <br> <strong>Published : </strong> May 5, 2025, 1:15 a.m. | 7 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4256"> read more </a> </article> <hr> <article> <h3> CVE-2025-4254 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4254 <br> <strong>Published : </strong> May 5, 2025, 12:15 a.m. | 8 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LIST Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4254"> read more </a> </article> <hr> <article> <h3> CVE-2025-4255 - PCMan FTP Server RMD Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4255 <br> <strong>Published : </strong> May 5, 2025, 12:15 a.m. | 8 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 05 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4255"> read more </a> </article> <hr> <article> <h3> CVE-2025-4252 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4252 <br> <strong>Published : </strong> May 4, 2025, 11:15 p.m. | 6 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component APPEND Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4252"> read more </a> </article> <hr> <article> <h3> CVE-2025-4253 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4253 <br> <strong>Published : </strong> May 4, 2025, 11:15 p.m. | 6 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HASH Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4253"> read more </a> </article> <hr> <article> <h3> CVE-2025-4251 - PCMan FTP Server Remote Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4251 <br> <strong>Published : </strong> May 4, 2025, 10:15 p.m. | 7 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4251"> read more </a> </article> <hr> <article> <h3> CVE-2025-4250 - Nero Social Networking Site SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4250 <br> <strong>Published : </strong> May 4, 2025, 9:17 a.m. | 20 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument fname/lname/login/password2/cpassword/address/cnumber/email/gender/propic/month leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 09:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4250"> read more </a> </article> <hr> <article> <h3> CVE-2025-4249 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4249 <br> <strong>Published : </strong> May 4, 2025, 7:15 a.m. | 22 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage-categories.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4249"> read more </a> </article> <hr> <article> <h3> CVE-2025-4248 - SourceCodester Simple To-Do List System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4248 <br> <strong>Published : </strong> May 4, 2025, 6:15 a.m. | 23 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4248"> read more </a> </article> <hr> <article> <h3> CVE-2025-4247 - SourceCodester Simple To-Do List System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4247 <br> <strong>Published : </strong> May 4, 2025, 5:15 a.m. | 21 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4247"> read more </a> </article> <hr> <article> <h3> CVE-2025-47245 - BlueWave Checkmate Role Tampering Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47245 <br> <strong>Published : </strong> May 4, 2025, 12:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 04 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47245"> read more </a> </article> <hr> <article> <h3> CVE-2025-47244 - Inedo ProGet C# Reflection Layer Remote Code Execution and Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-47244 <br> <strong>Published : </strong> May 3, 2025, 11:15 p.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining potentially sensitive information. Exploitation can occur if Anonymous access is enabled, or if there is a successful CSRF attack. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47244"> read more </a> </article> <hr> <article> <h3> CVE-2025-47241 - Apache Airflow URL Parsing Authority Component Vulnerability (CWE-20) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47241 <br> <strong>Published : </strong> May 3, 2025, 9:15 p.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47241"> read more </a> </article> <hr> <article> <h3> CVE-2025-4244 - Code-Projects Online Bus Reservation System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4244 <br> <strong>Published : </strong> May 3, 2025, 8:15 p.m. | 1 day, 6 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in code-projects Online Bus Reservation System 1.0. This affects an unknown part of the file /seatlocation.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4244"> read more </a> </article> <hr> <article> <h3> CVE-2025-1838 - IBM Cloud Pak for Business Automation Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1838 <br> <strong>Published : </strong> May 3, 2025, 7:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>IBM Cloud Pak for Business Automation 24.0.0 and 24.0.1 through 24.0.1 IF001 Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1838"> read more </a> </article> <hr> <article> <h3> CVE-2025-4242 - PHPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4242 <br> <strong>Published : </strong> May 3, 2025, 7:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4242"> read more </a> </article> <hr> <article> <h3> CVE-2025-4243 - Code-projects Online Bus Reservation System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4243 <br> <strong>Published : </strong> May 3, 2025, 7:15 p.m. | 1 day, 7 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Affected by this issue is some unknown functionality of the file /print.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4243"> read more </a> </article> <hr> <article> <h3> CVE-2025-4240 - PCMan FTP Server LCD Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4240 <br> <strong>Published : </strong> May 3, 2025, 6:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4240"> read more </a> </article> <hr> <article> <h3> CVE-2025-4241 - PHPGurukul Teacher Subject Allocation Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4241 <br> <strong>Published : </strong> May 3, 2025, 6:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4241"> read more </a> </article> <hr> <article> <h3> CVE-2025-1495 - IBM Business Automation Workflow Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1495 <br> <strong>Published : </strong> May 3, 2025, 5:15 p.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1495"> read more </a> </article> <hr> <article> <h3> CVE-2025-4238 - PCMan FTP Server MGET Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4238 <br> <strong>Published : </strong> May 3, 2025, 5:15 p.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4238"> read more </a> </article> <hr> <article> <h3> CVE-2025-4239 - PCMan FTP Server Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4239 <br> <strong>Published : </strong> May 3, 2025, 5:15 p.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component TYPE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4239"> read more </a> </article> <hr> <article> <h3> CVE-2024-41753 - IBM Cloud Pak for Business Automation Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41753 <br> <strong>Published : </strong> May 3, 2025, 4:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41753"> read more </a> </article> <hr> <article> <h3> CVE-2024-58134 - Mojolicious Default HMAC Session Secret Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58134 <br> <strong>Published : </strong> May 3, 2025, 4:15 p.m. | 1 day, 8 hours ago <br> <strong>Description : </strong>Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user’s session. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58134"> read more </a> </article> <hr> <article> <h3> CVE-2025-4237 - PCMan FTP Server MDELETE Command Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4237 <br> <strong>Published : </strong> May 3, 2025, 3:15 p.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4237"> read more </a> </article> <hr> <article> <h3> CVE-2025-4236 - PCMan FTP Server MDIR Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4236 <br> <strong>Published : </strong> May 3, 2025, 2:15 p.m. | 1 day, 10 hours ago <br> <strong>Description : </strong>A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component MDIR Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4236"> read more </a> </article> <hr> <article> <h3> CVE-2025-37799 - vmxnet3 Linux Kernel Malformed Packet Sizing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37799 <br> <strong>Published : </strong> May 3, 2025, 12:15 p.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 (that is, packet sizes between 128 - 3k bytes). We noticed MTU-related connectivity issues with Cilium's service load- balancing in case of vmxnet3 as NIC underneath. A simple curl to a HTTP backend service where the XDP LB was doing IPIP encap led to overly large packet sizes but only for *some* of the packets (e.g. HTTP GET request) while others (e.g. the prior TCP 3WHS) looked completely fine on the wire. In fact, the pcap recording on the backend node actually revealed that the node with the XDP LB was leaking uninitialized kernel data onto the wire for the affected packets, for example, while the packets should have been 152 bytes their actual size was 1482 bytes, so the remainder after 152 bytes was padded with whatever other data was in that page at the time (e.g. we saw user/payload data from prior processed packets). We only noticed this through an MTU issue, e.g. when the XDP LB node and the backend node both had the same MTU (e.g. 1500) then the curl request got dropped on the backend node's NIC given the packet was too large even though the IPIP-encapped packet normally would never even come close to the MTU limit. Lowering the MTU on the XDP LB (e.g. 1480) allowed to let the curl request succeed (which also indicates that the kernel ignored the padding, and thus the issue wasn't very user-visible). Commit e127ce7699c1 ("vmxnet3: Fix missing reserved tailroom") was too eager to also switch xdp_prepare_buff() from rcd->len to rbi->len. It really needs to stick to rcd->len which is the actual packet length from the descriptor. The latter we also feed into vmxnet3_process_xdp_small(), by the way, and it indicates the correct length needed to initialize the xdp->{data,data_end} parts. For e127ce7699c1 ("vmxnet3: Fix missing reserved tailroom") the relevant part was adapting xdp_init_buff() to address the warning given the xdp_data_hard_end() depends on xdp->frame_sz. With that fixed, traffic on the wire looks good again. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37799"> read more </a> </article> <hr> <article> <h3> CVE-2025-4226 - PHPGurukul Cyber Cafe Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4226 <br> <strong>Published : </strong> May 3, 2025, 11:15 a.m. | 1 day, 13 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4226"> read more </a> </article> <hr> <article> <h3> CVE-2024-58135 - Mojolicious Weak HMAC Session Secret Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58135 <br> <strong>Published : </strong> May 3, 2025, 11:15 a.m. | 1 day, 9 hours ago <br> <strong>Description : </strong>Mojolicious versions from 7.28 through 9.39 for Perl may generate weak HMAC session secrets. When creating a default app with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand() function, and used for authenticating and protecting the integrity of the application's sessions. This may allow an attacker to brute force the application's session keys. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58135"> read more </a> </article> <hr> <article> <h3> CVE-2025-3815 - WordPress SurveyJS Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3815 <br> <strong>Published : </strong> May 3, 2025, 8:15 a.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.12.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3815"> read more </a> </article> <hr> <article> <h3> CVE-2025-4222 - WordPress Database Toolset Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-4222 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 1 day, 17 hours ago <br> <strong>Description : </strong>The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup files. An index file is present, so a brute force attack would need to be successful in order to compromise any data. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4222"> read more </a> </article> <hr> <article> <h3> CVE-2025-4199 - Abundatrade Plugin for WordPress CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4199 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 1 day, 5 hours ago <br> <strong>Description : </strong>The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4199"> read more </a> </article> <hr> <article> <h3> CVE-2025-4172 - VerticalResponse WordPress Newsletter Widget Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4172 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>The VerticalResponse Newsletter Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'verticalresponse' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4172"> read more </a> </article> <hr> <article> <h3> CVE-2025-4188 - WordPress Advanced Reorder Image Text Slider CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-4188 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'reorder-simple-image-text-slider-setting' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4188"> read more </a> </article> <hr> <article> <h3> CVE-2025-4198 - Alink Tap Plugin for WordPress Cross-Site Request Forgery (CSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4198 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the 'alink-tap' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4198"> read more </a> </article> <hr> <article> <h3> CVE-2025-47229 - GNU PSPP Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47229 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 17 hours, 38 minutes ago <br> <strong>Description : </strong>libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such as data that triggers a call from src/data/dictionary.c code into src/data/variable.c code. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47229"> read more </a> </article> <hr> <article> <h3> CVE-2025-4168 - WordPress Subpage List Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4168 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 17 hours, 38 minutes ago <br> <strong>Description : </strong>The Subpage List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'subpages' shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4168"> read more </a> </article> <hr> <article> <h3> CVE-2025-4170 - Xavin's Review Ratings Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4170 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 17 hours, 38 minutes ago <br> <strong>Description : </strong>The Xavin's Review Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xrr' shortcode in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4170"> read more </a> </article> <hr> <article> <h3> CVE-2024-13738 - "Motors Car Dealer, Rental Listing WordPress Theme Shortcode Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13738 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 15 hours, 10 minutes ago <br> <strong>Description : </strong>The The Motors - Car Dealer, Rental & Listing WordPress theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.6.65. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. *It is unclear exactly which version the issue was patched in from the changelog. Therefore, we used the latest version at the time of verification. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13738"> read more </a> </article> <hr> <article> <h3> CVE-2025-3779 - WordPress Personizely Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3779 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 15 hours, 10 minutes ago <br> <strong>Description : </strong>The Personizely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘widgetId’ parameter in all versions up to, and including, 0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3779"> read more </a> </article> <hr> <article> <h3> CVE-2025-3918 - WordPress Job Listings Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3918 <br> <strong>Published : </strong> May 3, 2025, 3:15 a.m. | 15 hours, 10 minutes ago <br> <strong>Description : </strong>The Job Listings plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the register_action() function in versions 0.1 to 0.1.1. The plugin’s registration handler reads the client-supplied $_POST['user_role'] and passes it directly to wp_insert_user() without restricting to a safe set of roles. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 03 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3918"> read more </a> </article> <hr> <article> <h3> CVE-2025-46723 - OpenVM AUIPC Instruction Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46723 <br> <strong>Published : </strong> May 2, 2025, 11:15 p.m. | 19 hours, 10 minutes ago <br> <strong>Description : </strong>OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is vulnerable to overflow through byte decomposition of pc in AUIPC chip. A typo results in the highest limb of pc being range checked to 8-bits instead of 6-bits. This results in the if statement never being triggered because the enumeration gives i=0,1,2, when instead the enumeration should give i=1,2,3, leaving pc_limbs[3] range checked to 8-bits instead of 6-bits. This leads to a vulnerability where the pc_limbs decomposition differs from the true pc, which means a malicious prover can make the destination register take a different value than the AUIPC instruction dictates, by making the decomposition overflow the BabyBear field. This issue has been patched in version 1.1.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46723"> read more </a> </article> <hr> <article> <h3> CVE-2024-55069 - FFmpeg Null Pointer Dereference in iamf_read_header </h3> <p> <strong>CVE ID : </strong>CVE-2024-55069 <br> <strong>Published : </strong> May 2, 2025, 10:15 p.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55069"> read more </a> </article> <hr> <article> <h3> CVE-2025-21572 - OpenGrok Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21572 <br> <strong>Published : </strong> May 2, 2025, 10:15 p.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21572"> read more </a> </article> <hr> <article> <h3> CVE-2022-21546 - Dell SBC Null Data Buffer Access Crash Vulnerability (Denial of Service) </h3> <p> <strong>CVE ID : </strong>CVE-2022-21546 <br> <strong>Published : </strong> May 2, 2025, 10:15 p.m. | 18 hours, 37 minutes ago <br> <strong>Description : </strong>In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-21546"> read more </a> </article> <hr> <article> <h3> CVE-2025-4215 - "uBlock Origin Regular Expression Complexity Remote Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4215 <br> <strong>Published : </strong> May 2, 2025, 9:15 p.m. | 19 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.63.3b17 is able to address this issue. The patch is identified as eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4215"> read more </a> </article> <hr> <article> <h3> CVE-2025-4218 - Handrew BrowserPilot GPTSeleniumAgent Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4218 <br> <strong>Published : </strong> May 2, 2025, 9:15 p.m. | 19 hours, 37 minutes ago <br> <strong>Description : </strong>A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gpt_selenium_agent.py. The manipulation of the argument instructions leads to code injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4218"> read more </a> </article> <hr> <article> <h3> CVE-2025-0782 - H2O-3 S3 Bucket Public Write Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0782 <br> <strong>Published : </strong> May 2, 2025, 9:15 p.m. | 17 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability could lead to remote code execution (RCE) on any user who uses the application. Additionally, an attacker could modify the documentation to include malicious download links. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0782"> read more </a> </article> <hr> <article> <h3> CVE-2025-47226 - Grokability Snipe-IT Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-47226 <br> <strong>Published : </strong> May 2, 2025, 9:15 p.m. | 17 hours, 35 minutes ago <br> <strong>Description : </strong>Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47226"> read more </a> </article> <hr> <article> <h3> CVE-2025-4214 - PHPGuruku Online DJ Booking Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4214 <br> <strong>Published : </strong> May 2, 2025, 8:15 p.m. | 18 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGuruku Online DJ Booking Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4214"> read more </a> </article> <hr> <article> <h3> CVE-2024-58253 - Obfstr Crate Invalid UTF-8 Conversion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58253 <br> <strong>Published : </strong> May 2, 2025, 8:15 p.m. | 16 hours, 36 minutes ago <br> <strong>Description : </strong>In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58253"> read more </a> </article> <hr> <article> <h3> CVE-2025-4213 - PHPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4213 <br> <strong>Published : </strong> May 2, 2025, 6:15 p.m. | 16 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4213"> read more </a> </article> <hr> <article> <h3> CVE-2025-45800 - TOTOLINK A950RG Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-45800 <br> <strong>Published : </strong> May 2, 2025, 5:15 p.m. | 17 hours, 9 minutes ago <br> <strong>Description : </strong>TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45800"> read more </a> </article> <hr> <article> <h3> CVE-2025-46332 - Vercel Flags SDK Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46332 <br> <strong>Published : </strong> May 2, 2025, 5:15 p.m. | 17 hours, 9 minutes ago <br> <strong>Description : </strong>Flags SDK is an open-source feature flags toolkit for Next.js and SvelteKit. Impacted versions include flags from 3.2.0 and prior and @vercel/flags from 3.1.1 and prior as certain circumstances allows a bad actor with detailed knowledge of the vulnerability to list all flags returned by the flags discovery endpoint (.well-known/vercel/flags). This vulnerability allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the flags discovery endpoint, including the flag names, flag descriptions, available options and their labels (e.g. true, false), and default flag values. This issue has been patched in flags@4.0.0, users of flags and @vercel/flags should also migrate to flags@4.0.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46332"> read more </a> </article> <hr> <article> <h3> CVE-2025-3879 - Vault Azure Auth Token Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3879 <br> <strong>Published : </strong> May 2, 2025, 5:15 p.m. | 13 hours, 34 minutes ago <br> <strong>Description : </strong>Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3879"> read more </a> </article> <hr> <article> <h3> CVE-2023-53135 - Riscv Linux Kernel Stack Out-of-Bounds Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53135 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode When CONFIG_FRAME_POINTER is unset, the stack unwinding function walk_stackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following backtrace: [ 0.000000] ================================================================== [ 0.000000] BUG: KASAN: stack-out-of-bounds in walk_stackframe+0xa6/0x11a [ 0.000000] Read of size 8 at addr ffffffff81807c40 by task swapper/0 [ 0.000000] [ 0.000000] CPU: 0 PID: 0 Comm: swapper Not tainted 6.2.0-12919-g24203e6db61f #43 [ 0.000000] Hardware name: riscv-virtio,qemu (DT) [ 0.000000] Call Trace: [ 0.000000] [<ffffffff80007ba8>] walk_stackframe+0x0/0x11a [ 0.000000] [<ffffffff80099ecc>] init_param_lock+0x26/0x2a [ 0.000000] [<ffffffff80007c4a>] walk_stackframe+0xa2/0x11a [ 0.000000] [<ffffffff80c49c80>] dump_stack_lvl+0x22/0x36 [ 0.000000] [<ffffffff80c3783e>] print_report+0x198/0x4a8 [ 0.000000] [<ffffffff80099ecc>] init_param_lock+0x26/0x2a [ 0.000000] [<ffffffff80007c4a>] walk_stackframe+0xa2/0x11a [ 0.000000] [<ffffffff8015f68a>] kasan_report+0x9a/0xc8 [ 0.000000] [<ffffffff80007c4a>] walk_stackframe+0xa2/0x11a [ 0.000000] [<ffffffff80007c4a>] walk_stackframe+0xa2/0x11a [ 0.000000] [<ffffffff8006e99c>] desc_make_final+0x80/0x84 [ 0.000000] [<ffffffff8009a04e>] stack_trace_save+0x88/0xa6 [ 0.000000] [<ffffffff80099fc2>] filter_irq_stacks+0x72/0x76 [ 0.000000] [<ffffffff8006b95e>] devkmsg_read+0x32a/0x32e [ 0.000000] [<ffffffff8015ec16>] kasan_save_stack+0x28/0x52 [ 0.000000] [<ffffffff8006e998>] desc_make_final+0x7c/0x84 [ 0.000000] [<ffffffff8009a04a>] stack_trace_save+0x84/0xa6 [ 0.000000] [<ffffffff8015ec52>] kasan_set_track+0x12/0x20 [ 0.000000] [<ffffffff8015f22e>] __kasan_slab_alloc+0x58/0x5e [ 0.000000] [<ffffffff8015e7ea>] __kmem_cache_create+0x21e/0x39a [ 0.000000] [<ffffffff80e133ac>] create_boot_cache+0x70/0x9c [ 0.000000] [<ffffffff80e17ab2>] kmem_cache_init+0x6c/0x11e [ 0.000000] [<ffffffff80e00fd6>] mm_init+0xd8/0xfe [ 0.000000] [<ffffffff80e011d8>] start_kernel+0x190/0x3ca [ 0.000000] [ 0.000000] The buggy address belongs to stack of task swapper/0 [ 0.000000] and is located at offset 0 in frame: [ 0.000000] stack_trace_save+0x0/0xa6 [ 0.000000] [ 0.000000] This frame has 1 object: [ 0.000000] [32, 56) 'c' [ 0.000000] [ 0.000000] The buggy address belongs to the physical page: [ 0.000000] page:(____ptrval____) refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x81a07 [ 0.000000] flags: 0x1000(reserved|zone=0) [ 0.000000] raw: 0000000000001000 ff600003f1e3d150 ff600003f1e3d150 0000000000000000 [ 0.000000] raw: 0000000000000000 0000000000000000 00000001ffffffff [ 0.000000] page dumped because: kasan: bad access detected [ 0.000000] [ 0.000000] Memory state around the buggy address: [ 0.000000] ffffffff81807b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 0.000000] ffffffff81807b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 0.000000] >ffffffff81807c00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 f3 [ 0.000000] ^ [ 0.000000] ffffffff81807c80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 0.000000] ffffffff81807d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 0.000000] ================================================================== Fix that by using READ_ONCE_NOCHECK when reading the stack in imprecise mode. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53135"> read more </a> </article> <hr> <article> <h3> CVE-2023-53136 - Linux af_unix Struct PID Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53136 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: af_unix: fix struct pid leaks in OOB support syzbot reported struct pid leak [1]. Issue is that queue_oob() calls maybe_add_creds() which potentially holds a reference on a pid. But skb->destructor is not set (either directly or by calling unix_scm_to_skb()) This means that subsequent kfree_skb() or consume_skb() would leak this reference. In this fix, I chose to fully support scm even for the OOB message. [1] BUG: memory leak unreferenced object 0xffff8881053e7f80 (size 128): comm "syz-executor242", pid 5066, jiffies 4294946079 (age 13.220s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff812ae26a>] alloc_pid+0x6a/0x560 kernel/pid.c:180 [<ffffffff812718df>] copy_process+0x169f/0x26c0 kernel/fork.c:2285 [<ffffffff81272b37>] kernel_clone+0xf7/0x610 kernel/fork.c:2684 [<ffffffff812730cc>] __do_sys_clone+0x7c/0xb0 kernel/fork.c:2825 [<ffffffff849ad699>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff849ad699>] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 [<ffffffff84a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53136"> read more </a> </article> <hr> <article> <h3> CVE-2023-53137 - Linux Kernel Ext4 Directory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53137 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a directory When we are renaming a directory to a different directory, we need to update '..' entry in the moved directory. However nothing prevents moved directory from being modified and even converted from the inline format to the normal format. When such race happens the rename code gets confused and we crash. Fix the problem by locking the moved directory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53137"> read more </a> </article> <hr> <article> <h3> CVE-2023-53138 - Cisco CAIF Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53138 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in cfusbl_device_notify() [1]. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbl_device_notify+0x7c9/0x870 net/caif/caif_usb.c:138 Read of size 8 at addr ffff88807ac4e6f0 by task kworker/u4:6/1214 CPU: 0 PID: 1214 Comm: kworker/u4:6 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0xeb/0x467 mm/kasan/report.c:313 print_report mm/kasan/report.c:429 [inline] kasan_report.cold+0xf4/0x1c6 mm/kasan/report.c:491 cfusbl_device_notify+0x7c9/0x870 net/caif/caif_usb.c:138 notifier_call_chain+0xb5/0x200 kernel/notifier.c:87 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:1945 call_netdevice_notifiers_extack net/core/dev.c:1983 [inline] call_netdevice_notifiers net/core/dev.c:1997 [inline] netdev_wait_allrefs_any net/core/dev.c:10227 [inline] netdev_run_todo+0xbc0/0x10f0 net/core/dev.c:10341 default_device_exit_batch+0x44e/0x590 net/core/dev.c:11334 ops_exit_list+0x125/0x170 net/core/net_namespace.c:167 cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:594 process_one_work+0x996/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 </TASK> When unregistering a net device, unregister_netdevice_many_notify() sets the device's reg_state to NETREG_UNREGISTERING, calls notifiers with NETDEV_UNREGISTER, and adds the device to the todo list. Later on, devices in the todo list are processed by netdev_run_todo(). netdev_run_todo() waits devices' reference count become 1 while rebdoadcasting NETDEV_UNREGISTER notification. When cfusbl_device_notify() is called with NETDEV_UNREGISTER multiple times, the parent device might be freed. This could cause UAF. Processing NETDEV_UNREGISTER multiple times also causes inbalance of reference count for the module. This patch fixes the issue by accepting only first NETDEV_UNREGISTER notification. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53138"> read more </a> </article> <hr> <article> <h3> CVE-2023-53139 - Linux Kernel NFC fdp Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2023-53139 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause out-of-bounds write in device_property_read_u8_array later. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53139"> read more </a> </article> <hr> <article> <h3> CVE-2023-53140 - "Linux Kernel SCSI Core /proc/scsi Directory Removal Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53140 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/${proc_name} directory earlier Remove the /proc/scsi/${proc_name} directory earlier to fix a race condition between unloading and reloading kernel modules. This fixes a bug introduced in 2009 by commit 77c019768f06 ("[SCSI] fix /proc memory leak in the SCSI core"). Fix the following kernel warning: proc_dir_entry 'scsi/scsi_debug' already registered WARNING: CPU: 19 PID: 27986 at fs/proc/generic.c:376 proc_register+0x27d/0x2e0 Call Trace: proc_mkdir+0xb5/0xe0 scsi_proc_hostdir_add+0xb5/0x170 scsi_host_alloc+0x683/0x6c0 sdebug_driver_probe+0x6b/0x2d0 [scsi_debug] really_probe+0x159/0x540 __driver_probe_device+0xdc/0x230 driver_probe_device+0x4f/0x120 __device_attach_driver+0xef/0x180 bus_for_each_drv+0xe5/0x130 __device_attach+0x127/0x290 device_initial_probe+0x17/0x20 bus_probe_device+0x110/0x130 device_add+0x673/0xc80 device_register+0x1e/0x30 sdebug_add_host_helper+0x1a7/0x3b0 [scsi_debug] scsi_debug_init+0x64f/0x1000 [scsi_debug] do_one_initcall+0xd7/0x470 do_init_module+0xe7/0x330 load_module+0x122a/0x12c0 __do_sys_finit_module+0x124/0x1a0 __x64_sys_finit_module+0x46/0x50 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53140"> read more </a> </article> <hr> <article> <h3> CVE-2023-53141 - Intel Ila Netlink Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53141 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() ila_xlat_nl_cmd_get_mapping() generates an empty skb, triggerring a recent sanity check [1]. Instead, return an error code, so that user space can get it. [1] skb_assert_len WARNING: CPU: 0 PID: 5923 at include/linux/skbuff.h:2527 skb_assert_len include/linux/skbuff.h:2527 [inline] WARNING: CPU: 0 PID: 5923 at include/linux/skbuff.h:2527 __dev_queue_xmit+0x1bc0/0x3488 net/core/dev.c:4156 Modules linked in: CPU: 0 PID: 5923 Comm: syz-executor269 Not tainted 6.2.0-syzkaller-18300-g2ebd1fbb946d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_assert_len include/linux/skbuff.h:2527 [inline] pc : __dev_queue_xmit+0x1bc0/0x3488 net/core/dev.c:4156 lr : skb_assert_len include/linux/skbuff.h:2527 [inline] lr : __dev_queue_xmit+0x1bc0/0x3488 net/core/dev.c:4156 sp : ffff80001e0d6c40 x29: ffff80001e0d6e60 x28: dfff800000000000 x27: ffff0000c86328c0 x26: dfff800000000000 x25: ffff0000c8632990 x24: ffff0000c8632a00 x23: 0000000000000000 x22: 1fffe000190c6542 x21: ffff0000c8632a10 x20: ffff0000c8632a00 x19: ffff80001856e000 x18: ffff80001e0d5fc0 x17: 0000000000000000 x16: ffff80001235d16c x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: ff80800008353a30 x10: 0000000000000000 x9 : 21567eaf25bfb600 x8 : 21567eaf25bfb600 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001e0d6558 x4 : ffff800015c74760 x3 : ffff800008596744 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000000e Call trace: skb_assert_len include/linux/skbuff.h:2527 [inline] __dev_queue_xmit+0x1bc0/0x3488 net/core/dev.c:4156 dev_queue_xmit include/linux/netdevice.h:3033 [inline] __netlink_deliver_tap_skb net/netlink/af_netlink.c:307 [inline] __netlink_deliver_tap+0x45c/0x6f8 net/netlink/af_netlink.c:325 netlink_deliver_tap+0xf4/0x174 net/netlink/af_netlink.c:338 __netlink_sendskb net/netlink/af_netlink.c:1283 [inline] netlink_sendskb+0x6c/0x154 net/netlink/af_netlink.c:1292 netlink_unicast+0x334/0x8d4 net/netlink/af_netlink.c:1380 nlmsg_unicast include/net/netlink.h:1099 [inline] genlmsg_unicast include/net/genetlink.h:433 [inline] genlmsg_reply include/net/genetlink.h:443 [inline] ila_xlat_nl_cmd_get_mapping+0x620/0x7d0 net/ipv6/ila/ila_xlat.c:493 genl_family_rcv_msg_doit net/netlink/genetlink.c:968 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1048 [inline] genl_rcv_msg+0x938/0xc1c net/netlink/genetlink.c:1065 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2574 genl_rcv+0x38/0x50 net/netlink/genetlink.c:1076 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline] netlink_unicast+0x660/0x8d4 net/netlink/af_netlink.c:1365 netlink_sendmsg+0x800/0xae0 net/netlink/af_netlink.c:1942 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0x558/0x844 net/socket.c:2479 ___sys_sendmsg net/socket.c:2533 [inline] __sys_sendmsg+0x26c/0x33c net/socket.c:2562 __do_sys_sendmsg net/socket.c:2571 [inline] __se_sys_sendmsg net/socket.c:2569 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2569 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 136484 hardirqs last enabled at (136483): [<ffff800008350244>] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:345 hardirqs last disabled at (136484): [<ffff800012358d60>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (136418): [<ffff800008020ea8>] softirq_ha ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53141"> read more </a> </article> <hr> <article> <h3> CVE-2023-53142 - "Ice: Buffer Overflow in ice_get_module_eeprom()" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53142 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_module_eeprom() is broken since commit e9c9692c8a81 ("ice: Reimplement module reads used by ethtool") In this refactor, ice_get_module_eeprom() reads the eeprom in blocks of size 8. But the condition that should protect the buffer overflow ignores the last block. The last block always contains zeros. Bug uncovered by ethtool upstream commit 9538f384b535 ("netlink: eeprom: Defer page requests to individual parsers") After this commit, ethtool reads a block with length = 1; to read the SFF-8024 identifier value. unpatched driver: $ ethtool -m enp65s0f0np0 offset 0x90 length 8 Offset Values ------ ------ 0x0090: 00 00 00 00 00 00 00 00 $ ethtool -m enp65s0f0np0 offset 0x90 length 12 Offset Values ------ ------ 0x0090: 00 00 01 a0 4d 65 6c 6c 00 00 00 00 $ $ ethtool -m enp65s0f0np0 Offset Values ------ ------ 0x0000: 11 06 06 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0060: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 08 00 0x0070: 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 patched driver: $ ethtool -m enp65s0f0np0 offset 0x90 length 8 Offset Values ------ ------ 0x0090: 00 00 01 a0 4d 65 6c 6c $ ethtool -m enp65s0f0np0 offset 0x90 length 12 Offset Values ------ ------ 0x0090: 00 00 01 a0 4d 65 6c 6c 61 6e 6f 78 $ ethtool -m enp65s0f0np0 Identifier : 0x11 (QSFP28) Extended identifier : 0x00 Extended identifier description : 1.5W max. Power consumption Extended identifier description : No CDR in TX, No CDR in RX Extended identifier description : High Power Class (> 3.5 W) not enabled Connector : 0x23 (No separable connector) Transceiver codes : 0x88 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Transceiver type : 40G Ethernet: 40G Base-CR4 Transceiver type : 25G Ethernet: 25G Base-CR CA-N Encoding : 0x05 (64B/66B) BR, Nominal : 25500Mbps Rate identifier : 0x00 Length (SMF,km) : 0km Length (OM3 50um) : 0m Length (OM2 50um) : 0m Length (OM1 62.5um) : 0m Length (Copper or Active cable) : 1m Transmitter technology : 0xa0 (Copper cable unequalized) Attenuation at 2.5GHz : 4db Attenuation at 5.0GHz : 5db Attenuation at 7.0GHz : 7db Attenuation at 12.9GHz : 10db ........ .... <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53142"> read more </a> </article> <hr> <article> <h3> CVE-2023-53143 - "Ext4 Linux Kernel Off-by-One Error in fsmap Handling" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53143 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ext4: fix another off-by-one fsmap error on 1k block filesystems Apparently syzbot figured out that issuing this FSMAP call: struct fsmap_head cmd = { .fmh_count = ...; .fmh_keys = { { .fmr_device = /* ext4 dev */, .fmr_physical = 0, }, { .fmr_device = /* ext4 dev */, .fmr_physical = 0, }, }, ... }; ret = ioctl(fd, FS_IOC_GETFSMAP, &cmd); Produces this crash if the underlying filesystem is a 1k-block ext4 filesystem: kernel BUG at fs/ext4/ext4.h:3331! invalid opcode: 0000 [#1] PREEMPT SMP CPU: 3 PID: 3227965 Comm: xfs_io Tainted: G W O 6.2.0-rc8-achx Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 RIP: 0010:ext4_mb_load_buddy_gfp+0x47c/0x570 [ext4] RSP: 0018:ffffc90007c03998 EFLAGS: 00010246 RAX: ffff888004978000 RBX: ffffc90007c03a20 RCX: ffff888041618000 RDX: 0000000000000000 RSI: 00000000000005a4 RDI: ffffffffa0c99b11 RBP: ffff888012330000 R08: ffffffffa0c2b7d0 R09: 0000000000000400 R10: ffffc90007c03950 R11: 0000000000000000 R12: 0000000000000001 R13: 00000000ffffffff R14: 0000000000000c40 R15: ffff88802678c398 FS: 00007fdf2020c880(0000) GS:ffff88807e100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd318a5fe8 CR3: 000000007f80f001 CR4: 00000000001706e0 Call Trace: <TASK> ext4_mballoc_query_range+0x4b/0x210 [ext4 dfa189daddffe8fecd3cdfd00564e0f265a8ab80] ext4_getfsmap_datadev+0x713/0x890 [ext4 dfa189daddffe8fecd3cdfd00564e0f265a8ab80] ext4_getfsmap+0x2b7/0x330 [ext4 dfa189daddffe8fecd3cdfd00564e0f265a8ab80] ext4_ioc_getfsmap+0x153/0x2b0 [ext4 dfa189daddffe8fecd3cdfd00564e0f265a8ab80] __ext4_ioctl+0x2a7/0x17e0 [ext4 dfa189daddffe8fecd3cdfd00564e0f265a8ab80] __x64_sys_ioctl+0x82/0xa0 do_syscall_64+0x2b/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7fdf20558aff RSP: 002b:00007ffd318a9e30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000000200c0 RCX: 00007fdf20558aff RDX: 00007fdf1feb2010 RSI: 00000000c0c0583b RDI: 0000000000000003 RBP: 00005625c0634be0 R08: 00005625c0634c40 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf1feb2010 R13: 00005625be70d994 R14: 0000000000000800 R15: 0000000000000000 For GETFSMAP calls, the caller selects a physical block device by writing its block number into fsmap_head.fmh_keys[01].fmr_device. To query mappings for a subrange of the device, the starting byte of the range is written to fsmap_head.fmh_keys[0].fmr_physical and the last byte of the range goes in fsmap_head.fmh_keys[1].fmr_physical. IOWs, to query what mappings overlap with bytes 3-14 of /dev/sda, you'd set the inputs as follows: fmh_keys[0] = { .fmr_device = major(8, 0), .fmr_physical = 3}, fmh_keys[1] = { .fmr_device = major(8, 0), .fmr_physical = 14}, Which would return you whatever is mapped in the 12 bytes starting at physical offset 3. The crash is due to insufficient range validation of keys[1] in ext4_getfsmap_datadev. On 1k-block filesystems, block 0 is not part of the filesystem, which means that s_first_data_block is nonzero. ext4_get_group_no_and_offset subtracts this quantity from the blocknr argument before cracking it into a group number and a block number within a group. IOWs, block group 0 spans blocks 1-8192 (1-based) instead of 0-8191 (0-based) like what happens with larger blocksizes. The net result of this encoding is that blocknr < s_first_data_block is not a valid input to this function. The end_fsb variable is set from the keys that are copied from userspace, which means that in the above example, its value is zero. That leads to an underflow here: blocknr = blocknr - le32_to_cpu(es->s_first_data_block); The division then operates on -1: offset = do_div(blocknr, EXT4_BLOCKS_PER_GROUP(sb)) >> EXT4_SB(sb)->s_cluster_bits; Leaving an impossibly large group number (2^32-1) in blocknr. ext4_getfsmap_check_keys checked that keys[0 ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53143"> read more </a> </article> <hr> <article> <h3> CVE-2023-53144 - Linux Kernel erofs LZMA HIGHMEM NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53144 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted 6.2.0-rc5 #4 Workqueue: erofs_worker z_erofs_decompressqueue_work EIP: z_erofs_lzma_decompress+0x34b/0x8ac z_erofs_decompress+0x12/0x14 z_erofs_decompress_queue+0x7e7/0xb1c z_erofs_decompressqueue_work+0x32/0x60 process_one_work+0x24b/0x4d8 ? process_one_work+0x1a4/0x4d8 worker_thread+0x14c/0x3fc kthread+0xe6/0x10c ? rescuer_thread+0x358/0x358 ? kthread_complete_and_exit+0x18/0x18 ret_from_fork+0x1c/0x28 ---[ end trace 0000000000000000 ]--- The bug is trivial and should be fixed now. It has no impact on !HIGHMEM platforms. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53144"> read more </a> </article> <hr> <article> <h3> CVE-2025-4210 - Casdoor SCIM User Creation Endpoint Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4210 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 10 hours, 34 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Casdoor up to 1.811.0. This vulnerability affects the function HandleScim of the file controllers/scim.go of the component SCIM User Creation Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.812.0 is able to address this issue. The name of the patch is 3d12ac8dc2282369296c3386815c00a06c6a92fe. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4210"> read more </a> </article> <hr> <article> <h3> CVE-2023-53127 - Linux Kernel SCSI MPI3MR Resource Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53127 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() Add a missing resource clean up in .remove. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53127"> read more </a> </article> <hr> <article> <h3> CVE-2023-53128 - "IBM Storage Media Initiator (MPI) 3.0.x Memory Leak Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53128 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttle_groups memory leak Add a missing kfree(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53128"> read more </a> </article> <hr> <article> <h3> CVE-2023-53129 - Linux Kernel - ext4 Directory Rename Deadlock Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53129 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ext4: Fix deadlock during directory rename As lockdep properly warns, we should not be locking i_rwsem while having transactions started as the proper lock ordering used by all directory handling operations is i_rwsem -> transaction start. Fix the lock ordering by moving the locking of the directory earlier in ext4_rename(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53129"> read more </a> </article> <hr> <article> <h3> CVE-2023-53130 - Linux Kernel Block Device Exclusivity Leak </h3> <p> <strong>CVE ID : </strong>CVE-2023-53130 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: block: fix wrong mode for blkdev_put() from disk_scan_partitions() If disk_scan_partitions() is called with 'FMODE_EXCL', blkdev_get_by_dev() will be called without 'FMODE_EXCL', however, follow blkdev_put() is still called with 'FMODE_EXCL', which will cause 'bd_holders' counter to leak. Fix the problem by using the right mode for blkdev_put(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53130"> read more </a> </article> <hr> <article> <h3> CVE-2023-53131 - SunRPC Thread Shutdown Leak </h3> <p> <strong>CVE ID : </strong>CVE-2023-53131 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53131"> read more </a> </article> <hr> <article> <h3> CVE-2023-53132 - "Mellanox MPI3MR Linux Kernel Memory Leak" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53132 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() Free mpi3mr_hba_port at .remove. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53132"> read more </a> </article> <hr> <article> <h3> CVE-2023-53133 - Apache Linux bpf Infinite Loop Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53133 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() When the buffer length of the recvmsg system call is 0, we got the flollowing soft lockup problem: watchdog: BUG: soft lockup - CPU#3 stuck for 27s! [a.out:6149] CPU: 3 PID: 6149 Comm: a.out Kdump: loaded Not tainted 6.2.0+ #30 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 RIP: 0010:remove_wait_queue+0xb/0xc0 Code: 5e 41 5f c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 57 <41> 56 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d 6b 18 4c 8d 73 20 RSP: 0018:ffff88811b5978b8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff88811a7d3780 RCX: ffffffffb7a4d768 RDX: dffffc0000000000 RSI: ffff88811b597908 RDI: ffff888115408040 RBP: 1ffff110236b2f1b R08: 0000000000000000 R09: ffff88811a7d37e7 R10: ffffed10234fa6fc R11: 0000000000000001 R12: ffff88811179b800 R13: 0000000000000001 R14: ffff88811a7d38a8 R15: ffff88811a7d37e0 FS: 00007f6fb5398740(0000) GS:ffff888237180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000010b6ba002 CR4: 0000000000370ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tcp_msg_wait_data+0x279/0x2f0 tcp_bpf_recvmsg_parser+0x3c6/0x490 inet_recvmsg+0x280/0x290 sock_recvmsg+0xfc/0x120 ____sys_recvmsg+0x160/0x3d0 ___sys_recvmsg+0xf0/0x180 __sys_recvmsg+0xea/0x1a0 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc The logic in tcp_bpf_recvmsg_parser is as follows: msg_bytes_ready: copied = sk_msg_recvmsg(sk, psock, msg, len, flags); if (!copied) { wait data; goto msg_bytes_ready; } In this case, "copied" always is 0, the infinite loop occurs. According to the Linux system call man page, 0 should be returned in this case. Therefore, in tcp_bpf_recvmsg_parser(), if the length is 0, directly return. Also modify several other functions with the same problem. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53133"> read more </a> </article> <hr> <article> <h3> CVE-2023-53134 - "Broadcom bnxt_en Linux kernel Memory Allocation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53134 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 4 hours, 31 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Avoid order-5 memory allocation for TPA data The driver needs to keep track of all the possible concurrent TPA (GRO/LRO) completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the amount of memory we allocate is order-5 on systems using 4K pages. Memory allocation failure has been reported: NetworkManager: page allocation failure: order:5, mode:0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 CPU: 15 PID: 2995 Comm: NetworkManager Kdump: loaded Not tainted 5.10.156 #1 Hardware name: Dell Inc. PowerEdge R660/0M1CC5, BIOS 0.2.25 08/12/2022 Call Trace: dump_stack+0x57/0x6e warn_alloc.cold.120+0x7b/0xdd ? _cond_resched+0x15/0x30 ? __alloc_pages_direct_compact+0x15f/0x170 __alloc_pages_slowpath.constprop.108+0xc58/0xc70 __alloc_pages_nodemask+0x2d0/0x300 kmalloc_order+0x24/0xe0 kmalloc_order_trace+0x19/0x80 bnxt_alloc_mem+0x1150/0x15c0 [bnxt_en] ? bnxt_get_func_stat_ctxs+0x13/0x60 [bnxt_en] __bnxt_open_nic+0x12e/0x780 [bnxt_en] bnxt_open+0x10b/0x240 [bnxt_en] __dev_open+0xe9/0x180 __dev_change_flags+0x1af/0x220 dev_change_flags+0x21/0x60 do_setlink+0x35c/0x1100 Instead of allocating this big chunk of memory and dividing it up for the concurrent TPA instances, allocate each small chunk separately for each TPA instance. This will reduce it to order-0 allocations. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53134"> read more </a> </article> <hr> <article> <h3> CVE-2023-53125 - "Linux Kernel SMSc75xx Network Stack Buffer Overflow" </h3> <p> <strong>CVE ID : </strong>CVE-2023-53125 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb->len Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53125"> read more </a> </article> <hr> <article> <h3> CVE-2023-53126 - Linux Kernel SCSI MPI3MR Memory Leak </h3> <p> <strong>CVE ID : </strong>CVE-2023-53126 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 2 hours, 34 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrioc->sas_hba.phy at .remove. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53126"> read more </a> </article> <hr> <article> <h3> CVE-2023-53121 - Linux Kernel TCP Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53121 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: tcp: tcp_make_synack() can be called from process context tcp_rtx_synack() now could be called in process context as explained in 0a375c822497 ("tcp: tcp_rtx_synack() can be called from process context"). tcp_rtx_synack() might call tcp_make_synack(), which will touch per-CPU variables with preemption enabled. This causes the following BUG: BUG: using __this_cpu_add() in preemptible [00000000] code: ThriftIO1/5464 caller is tcp_make_synack+0x841/0xac0 Call Trace: <TASK> dump_stack_lvl+0x10d/0x1a0 check_preemption_disabled+0x104/0x110 tcp_make_synack+0x841/0xac0 tcp_v6_send_synack+0x5c/0x450 tcp_rtx_synack+0xeb/0x1f0 inet_rtx_syn_ack+0x34/0x60 tcp_check_req+0x3af/0x9e0 tcp_rcv_state_process+0x59b/0x2030 tcp_v6_do_rcv+0x5f5/0x700 release_sock+0x3a/0xf0 tcp_sendmsg+0x33/0x40 ____sys_sendmsg+0x2f2/0x490 __sys_sendmsg+0x184/0x230 do_syscall_64+0x3d/0x90 Avoid calling __TCP_INC_STATS() with will touch per-cpu variables. Use TCP_INC_STATS() which is safe to be called from context switch. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53121"> read more </a> </article> <hr> <article> <h3> CVE-2023-53122 - RISC-V SiFive Errata Patching Mutex Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53122 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: RISC-V: fix taking the text_mutex twice during sifive errata patching Chris pointed out that some bonehead, *cough* me *cough*, added two mutex_locks() to the SiFive errata patching. The second was meant to have been a mutex_unlock(). This results in errors such as Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030 Oops [#1] Modules linked in: CPU: 0 PID: 0 Comm: swapper Not tainted 6.2.0-rc1-starlight-00079-g9493e6f3ce02 #229 Hardware name: BeagleV Starlight Beta (DT) epc : __schedule+0x42/0x500 ra : schedule+0x46/0xce epc : ffffffff8065957c ra : ffffffff80659a80 sp : ffffffff81203c80 gp : ffffffff812d50a0 tp : ffffffff8120db40 t0 : ffffffff81203d68 t1 : 0000000000000001 t2 : 4c45203a76637369 s0 : ffffffff81203cf0 s1 : ffffffff8120db40 a0 : 0000000000000000 a1 : ffffffff81213958 a2 : ffffffff81213958 a3 : 0000000000000000 a4 : 0000000000000000 a5 : ffffffff80a1bd00 a6 : 0000000000000000 a7 : 0000000052464e43 s2 : ffffffff8120db41 s3 : ffffffff80a1ad00 s4 : 0000000000000000 s5 : 0000000000000002 s6 : ffffffff81213938 s7 : 0000000000000000 s8 : 0000000000000000 s9 : 0000000000000001 s10: ffffffff812d7204 s11: ffffffff80d3c920 t3 : 0000000000000001 t4 : ffffffff812e6dd7 t5 : ffffffff812e6dd8 t6 : ffffffff81203bb8 status: 0000000200000100 badaddr: 0000000000000030 cause: 000000000000000d [<ffffffff80659a80>] schedule+0x46/0xce [<ffffffff80659dce>] schedule_preempt_disabled+0x16/0x28 [<ffffffff8065ae0c>] __mutex_lock.constprop.0+0x3fe/0x652 [<ffffffff8065b138>] __mutex_lock_slowpath+0xe/0x16 [<ffffffff8065b182>] mutex_lock+0x42/0x4c [<ffffffff8000ad94>] sifive_errata_patch_func+0xf6/0x18c [<ffffffff80002b92>] _apply_alternatives+0x74/0x76 [<ffffffff80802ee8>] apply_boot_alternatives+0x3c/0xfa [<ffffffff80803cb0>] setup_arch+0x60c/0x640 [<ffffffff80800926>] start_kernel+0x8e/0x99c ---[ end trace 0000000000000000 ]--- [Palmer: pick up Geert's bug report from the thread] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53122"> read more </a> </article> <hr> <article> <h3> CVE-2023-53123 - Linux Kernel PCI s390 Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53123 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI functions may be hotplugged individually even when they belong to a multi-function device. In particular on an SR-IOV device VFs may be removed and later re-added. In commit a50297cf8235 ("s390/pci: separate zbus creation from scanning") it was missed however that struct pci_bus and struct zpci_bus's resource list retained a reference to the PCI functions MMIO resources even though those resources are released and freed on hot-unplug. These stale resources may subsequently be claimed when the PCI function re-appears resulting in use-after-free. One idea of fixing this use-after-free in s390 specific code that was investigated was to simply keep resources around from the moment a PCI function first appeared until the whole virtual PCI bus created for a multi-function device disappears. The problem with this however is that due to the requirement of artificial MMIO addreesses (address cookies) extra logic is then needed to keep the address cookies compatible on re-plug. At the same time the MMIO resources semantically belong to the PCI function so tying their lifecycle to the function seems more logical. Instead a simpler approach is to remove the resources of an individually hot-unplugged PCI function from the PCI bus's resource list while keeping the resources of other PCI functions on the PCI bus untouched. This is done by introducing pci_bus_remove_resource() to remove an individual resource. Similarly the resource also needs to be removed from the struct zpci_bus's resource list. It turns out however, that there is really no need to add the MMIO resources to the struct zpci_bus's resource list at all and instead we can simply use the zpci_bar_struct's resource pointer directly. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53123"> read more </a> </article> <hr> <article> <h3> CVE-2023-53124 - MPT3SAS NULL Pointer Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-53124 <br> <strong>Published : </strong> May 2, 2025, 4:15 p.m. | 30 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-53124"> read more </a> </article> <hr> <article> <h3> CVE-2025-2605 - Honeywell MB-Secure OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2605 <br> <strong>Published : </strong> May 2, 2025, 1:15 p.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2605"> read more </a> </article> <hr> <article> <h3> CVE-2025-4204 - WordPress Ultimate Auction Pro SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4204 <br> <strong>Published : </strong> May 2, 2025, 1:15 p.m. | 1 hour, 9 minutes ago <br> <strong>Description : </strong>The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4204"> read more </a> </article> <hr> <article> <h3> CVE-2025-2421 - Profelis Informatics SambaBox Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2421 <br> <strong>Published : </strong> May 2, 2025, 12:15 p.m. | 2 hours, 10 minutes ago <br> <strong>Description : </strong>Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.This issue affects SambaBox: before 5.1. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2421"> read more </a> </article> <hr> <article> <h3> CVE-2025-2488 - Profelis Informatics SambaBox Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-2488 <br> <strong>Published : </strong> May 2, 2025, 12:15 p.m. | 2 hours, 10 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS).This issue affects SambaBox: before 5.1. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2488"> read more </a> </article> <hr> <article> <h3> CVE-2025-1301 - Yordam Informatics Library Automation System Reflected Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1301 <br> <strong>Published : </strong> May 2, 2025, 11:15 a.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.This issue affects Library Automation System: before 21.6. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1301"> read more </a> </article> <hr> <article> <h3> CVE-2025-0072 - Arm Ltd Valhall GPU Kernel Driver After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0072 <br> <strong>Published : </strong> May 2, 2025, 10:15 a.m. | 4 hours, 10 minutes ago <br> <strong>Description : </strong>Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory. This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0072"> read more </a> </article> <hr> <article> <h3> CVE-2025-0427 - Arm Ltd Bifrost GPU, Valhall GPU, Arm 5th Gen GPU Architecture After Free Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-0427 <br> <strong>Published : </strong> May 2, 2025, 10:15 a.m. | 4 hours, 10 minutes ago <br> <strong>Description : </strong>Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0427"> read more </a> </article> <hr> <article> <h3> CVE-2025-2812 - Mydata Informatics Ticket Sales Automation SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-2812 <br> <strong>Published : </strong> May 2, 2025, 9:15 a.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection.This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY). <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2812"> read more </a> </article> <hr> <article> <h3> CVE-2024-11142 - Gosoft Software Proticaret E-Commerce CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11142 <br> <strong>Published : </strong> May 2, 2025, 8:15 a.m. | 6 hours, 10 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery.This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11142"> read more </a> </article> <hr> <article> <h3> CVE-2024-13858 - Buddyboss Platform Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13858 <br> <strong>Published : </strong> May 2, 2025, 7:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘invitee_name’ parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13858"> read more </a> </article> <hr> <article> <h3> CVE-2024-13859 - Buddyboss WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-13859 <br> <strong>Published : </strong> May 2, 2025, 7:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bp_nouveau_ajax_media_save’ function in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13859"> read more </a> </article> <hr> <article> <h3> CVE-2024-13860 - Buddyboss WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-13860 <br> <strong>Published : </strong> May 2, 2025, 7:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bbp_topic_title’ parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13860"> read more </a> </article> <hr> <article> <h3> CVE-2025-3438 - WordPress WCFM Marketplace MStore API Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3438 <br> <strong>Published : </strong> May 2, 2025, 6:15 a.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 4.17.4. This is due to a lack of restriction of role when registering. This makes it possible for unauthenticated attackers to to register with the 'wcfm_vendor' role, which is a Store Vendor role in the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress. The vulnerability can only be exploited if the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin is installed and activated. The vulnerability was partially patched in version 4.17.3. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3438"> read more </a> </article> <hr> <article> <h3> CVE-2025-3488 - WordPress WPML Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3488 <br> <strong>Published : </strong> May 2, 2025, 6:15 a.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>The WPML plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpml_language_switcher shortcode in versions 3.6.0 - 4.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3488"> read more </a> </article> <hr> <article> <h3> CVE-2025-3513 - "SureForms WordPress Stored Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3513 <br> <strong>Published : </strong> May 2, 2025, 6:15 a.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3513"> read more </a> </article> <hr> <article> <h3> CVE-2025-3514 - "SureForms WordPress Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3514 <br> <strong>Published : </strong> May 2, 2025, 6:15 a.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3514"> read more </a> </article> <hr> <article> <h3> CVE-2025-47201 - Intrexx Portal Server Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-47201 <br> <strong>Published : </strong> May 2, 2025, 6:15 a.m. | 8 hours, 9 minutes ago <br> <strong>Description : </strong>In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47201"> read more </a> </article> <hr> <article> <h3> CVE-2025-1326 - Homey WordPress Missing Capability Check Data Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1326 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The Homey theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the homey_reservation_del() function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary reservations and posts. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1326"> read more </a> </article> <hr> <article> <h3> CVE-2025-1327 - "Homey WordPress Theme Insecure Direct Object Reference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1327 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The Homey theme for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.4 via the 'homey_delete_user_account' action due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's accounts. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1327"> read more </a> </article> <hr> <article> <h3> CVE-2025-3510 - TagDiv Composer WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3510 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3510"> read more </a> </article> <hr> <article> <h3> CVE-2025-3707 - Sunnet eHDR CTMS SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3707 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database contents. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3707"> read more </a> </article> <hr> <article> <h3> CVE-2025-3708 - Le-Yan Le-Show Medical SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3708 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3708"> read more </a> </article> <hr> <article> <h3> CVE-2025-3709 - Agentflow from Flowring Technology Account Lockout Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3709 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3709"> read more </a> </article> <hr> <article> <h3> CVE-2025-3748 - WordPress Taxonomy Chain Menu Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3748 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3748"> read more </a> </article> <hr> <article> <h3> CVE-2025-3858 - WordPress Formality Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3858 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 10 hours, 9 minutes ago <br> <strong>Description : </strong>The Formality plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.5.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3858"> read more </a> </article> <hr> <article> <h3> CVE-2024-13419 - WordPress Smart Framework Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-13419 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 8 hours, 30 minutes ago <br> <strong>Description : </strong>Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to a missing capability check on the saveOptions() and importThemeOptions() functions in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings which includes custom JavaScript that is enabled site-wide. This issue was escalated to Envato over two months from the date of this disclosure and the issue is still vulnerable. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13419"> read more </a> </article> <hr> <article> <h3> CVE-2024-13420 - WordPress Envato Theme/Plugin Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13420 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 8 hours, 30 minutes ago <br> <strong>Description : </strong>Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13420"> read more </a> </article> <hr> <article> <h3> CVE-2024-13322 - WordPress Ads Pro Plugin SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13322 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 6 hours, 29 minutes ago <br> <strong>Description : </strong>The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'a_id' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13322"> read more </a> </article> <hr> <article> <h3> CVE-2024-13344 - WooCommerce Advance Seat Reservation SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-13344 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 6 hours, 29 minutes ago <br> <strong>Description : </strong>The Advance Seat Reservation Management for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'profileId' parameter in all versions up to, and including, 3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13344"> read more </a> </article> <hr> <article> <h3> CVE-2024-13418 - WordPress Theme/Plugin Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13418 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 6 hours, 29 minutes ago <br> <strong>Description : </strong>Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13418"> read more </a> </article> <hr> <article> <h3> CVE-2024-12023 - "Elementor CRM FULL Cliente SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-12023 <br> <strong>Published : </strong> May 2, 2025, 4:15 a.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>The FULL – Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable when the PRO version of the plugin is activated, along with Elementor Pro and Elementor CRM. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12023"> read more </a> </article> <hr> <article> <h3> CVE-2025-4177 - Flynax Bridge - Unauthenticated User Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4177 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 5 hours, 29 minutes ago <br> <strong>Description : </strong>The Flynax Bridge plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteUser() function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to delete arbitrary users. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4177"> read more </a> </article> <hr> <article> <h3> CVE-2025-4179 - Flynax Bridge WordPress Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-4179 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 5 hours, 29 minutes ago <br> <strong>Description : </strong>The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser() function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to register new user accounts as authors. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4179"> read more </a> </article> <hr> <article> <h3> CVE-2025-2880 - Yame Link In Bio WordPress Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2880 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 3 hours, 29 minutes ago <br> <strong>Description : </strong>The Yame | Link In Bio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2880"> read more </a> </article> <hr> <article> <h3> CVE-2025-3670 - WordPress KiwiChat NextClient Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3670 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 3 hours, 29 minutes ago <br> <strong>Description : </strong>The KiwiChat NextClient plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3670"> read more </a> </article> <hr> <article> <h3> CVE-2025-3746 - WordPress One Tap Signin Plugin Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3746 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 3 hours, 29 minutes ago <br> <strong>Description : </strong>The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59. This is due to the plugin not properly validating a user's identity prior to updating their details, like email. This makes it possible for unauthenticated attackers to change arbitrary users' email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. Additionally, the plugin returns authentication cookies in the response, which can be used to access the account directly. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3746"> read more </a> </article> <hr> <article> <h3> CVE-2025-4131 - WordPress GmapsMania Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4131 <br> <strong>Published : </strong> May 2, 2025, 3:15 a.m. | 3 hours, 29 minutes ago <br> <strong>Description : </strong>The GmapsMania plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gmap shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4131"> read more </a> </article> <hr> <article> <h3> CVE-2025-29825 - Microsoft Edge (Chromium-based) UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29825 <br> <strong>Published : </strong> May 2, 2025, 2:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29825"> read more </a> </article> <hr> <article> <h3> CVE-2025-4196 - SourceCodester Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4196 <br> <strong>Published : </strong> May 2, 2025, 2:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /birthing.php. The manipulation of the argument comp_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4196"> read more </a> </article> <hr> <article> <h3> CVE-2025-4197 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4197 <br> <strong>Published : </strong> May 2, 2025, 2:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_xpatient.php. The manipulation of the argument lastname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4197"> read more </a> </article> <hr> <article> <h3> CVE-2025-4193 - iSourcecode Restaurant Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4193 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_update.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4193"> read more </a> </article> <hr> <article> <h3> CVE-2025-4195 - iSourcecode Gym Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4195 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_member. The manipulation of the argument umember_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4195"> read more </a> </article> <hr> <article> <h3> CVE-2024-55909 - IBM Concert Software Archive File DoS </h3> <p> <strong>CVE ID : </strong>CVE-2024-55909 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 1 hour, 28 minutes ago <br> <strong>Description : </strong>IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55909"> read more </a> </article> <hr> <article> <h3> CVE-2024-55910 - IBM Concert Software SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-55910 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 1 hour, 28 minutes ago <br> <strong>Description : </strong>IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55910"> read more </a> </article> <hr> <article> <h3> CVE-2024-55912 - IBM Concert Software Cryptographic Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-55912 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 1 hour, 28 minutes ago <br> <strong>Description : </strong>IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55912"> read more </a> </article> <hr> <article> <h3> CVE-2024-55913 - IBM Concert Software Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-55913 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 1 hour, 28 minutes ago <br> <strong>Description : </strong>IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-55913"> read more </a> </article> <hr> <article> <h3> CVE-2025-4192 - iSourcecode Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4192 <br> <strong>Published : </strong> May 2, 2025, 1:15 a.m. | 1 hour, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4192"> read more </a> </article> <hr> <article> <h3> CVE-2025-4184 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4184 <br> <strong>Published : </strong> May 2, 2025, 12:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4184"> read more </a> </article> <hr> <article> <h3> CVE-2025-4185 - Wangshen SecGate 3600 File Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4185 <br> <strong>Published : </strong> May 2, 2025, 12:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing of the file ?g=obj_area_export_save. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4185"> read more </a> </article> <hr> <article> <h3> CVE-2025-4186 - SecGate 3600 Wangshen Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4186 <br> <strong>Published : </strong> May 2, 2025, 12:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4186"> read more </a> </article> <hr> <article> <h3> CVE-2025-4191 - PHPGurukul Employee Record Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4191 <br> <strong>Published : </strong> May 2, 2025, 12:15 a.m. | 2 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /editmyeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 02 May 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4191"> read more </a> </article> <hr> <article> <h3> CVE-2024-52903 - IBM Db2 Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-52903 <br> <strong>Published : </strong> May 1, 2025, 11:15 p.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52903"> read more </a> </article> <hr> <article> <h3> CVE-2025-4181 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4181 <br> <strong>Published : </strong> May 1, 2025, 11:15 p.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4181"> read more </a> </article> <hr> <article> <h3> CVE-2025-4182 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4182 <br> <strong>Published : </strong> May 1, 2025, 11:15 p.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component BELL Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4182"> read more </a> </article> <hr> <article> <h3> CVE-2025-4183 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4183 <br> <strong>Published : </strong> May 1, 2025, 11:15 p.m. | 3 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RECV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4183"> read more </a> </article> <hr> <article> <h3> CVE-2025-1333 - IBM MQ Container Keycloak Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-1333 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1333"> read more </a> </article> <hr> <article> <h3> CVE-2025-27365 - IBM MQ Operator SIGSEGV Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27365 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27365"> read more </a> </article> <hr> <article> <h3> CVE-2025-43595 - MSP360 Backup Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43595 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. Users are recommended to upgrade to MSP360 Backup 4.4 (released on 2025-04-22). <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43595"> read more </a> </article> <hr> <article> <h3> CVE-2025-4176 - PHPGurukul Blood Bank Donor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4176 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4176"> read more </a> </article> <hr> <article> <h3> CVE-2025-4178 - Xiaowei1118 Java Server Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4178 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in xiaowei1118 java_server up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component File Upload API. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4178"> read more </a> </article> <hr> <article> <h3> CVE-2025-4180 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4180 <br> <strong>Published : </strong> May 1, 2025, 10:15 p.m. | 4 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component TRACE Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4180"> read more </a> </article> <hr> <article> <h3> CVE-2025-4175 - AlanBinu007 Spring-Boot-Advanced-Projects Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4175 <br> <strong>Published : </strong> May 1, 2025, 9:15 p.m. | 5 hours, 28 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in AlanBinu007 Spring-Boot-Advanced-Projects up to 3.1.3. This affects the function uploadUserProfileImage of the file /Spring-Boot-Advanced-Projects-main/Project-4.SpringBoot-AWS-S3/backend/src/main/java/com/urunov/profile/UserProfileController.jav of the component Upload Profile API Endpoint. The manipulation of the argument File leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4175"> read more </a> </article> <hr> <article> <h3> CVE-2024-48905 - Sematell ReplyOne Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-48905 <br> <strong>Published : </strong> May 1, 2025, 9:15 p.m. | 2 hours, 59 minutes ago <br> <strong>Description : </strong>Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48905"> read more </a> </article> <hr> <article> <h3> CVE-2024-48906 - Sematell ReplyOne Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-48906 <br> <strong>Published : </strong> May 1, 2025, 9:15 p.m. | 2 hours, 59 minutes ago <br> <strong>Description : </strong>Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48906"> read more </a> </article> <hr> <article> <h3> CVE-2024-48907 - Sematell ReplyOne 7.4.3.0 allows SSRF via the appl </h3> <p> <strong>CVE ID : </strong>CVE-2024-48907 <br> <strong>Published : </strong> May 1, 2025, 9:15 p.m. | 2 hours, 59 minutes ago <br> <strong>Description : </strong>Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-48907"> read more </a> </article> <hr> <article> <h3> CVE-2025-46625 - Tenda RX2 Pro HTTPd Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46625 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46625"> read more </a> </article> <hr> <article> <h3> CVE-2025-46626 - Tenda RX2 Pro AES Key Reuse Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46626 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic to the service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46626"> read more </a> </article> <hr> <article> <h3> CVE-2025-46627 - Tenda RX2 Pro Weak Credential Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46627 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46627"> read more </a> </article> <hr> <article> <h3> CVE-2025-46628 - Tenda RX2 Pro Remote Root Shell Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46628 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a crafted UDP packet to the 'ate' service when it is enabled. Authentication is not needed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46628"> read more </a> </article> <hr> <article> <h3> CVE-2025-46629 - Tenda RX2 Pro Remote Access Control Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46629 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46629"> read more </a> </article> <hr> <article> <h3> CVE-2025-46630 - Tenda RX2 Pro Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46630 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' (a remote system management binary) by sending a /goform/ate web request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46630"> read more </a> </article> <hr> <article> <h3> CVE-2025-46631 - Tenda RX2 Pro Telnet Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46631 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46631"> read more </a> </article> <hr> <article> <h3> CVE-2025-46632 - Tenda RX2 Pro Cryptographic IV Reuse Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46632 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between client and server. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46632"> read more </a> </article> <hr> <article> <h3> CVE-2025-46633 - Tenda RX2 Pro Information Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-46633 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46633"> read more </a> </article> <hr> <article> <h3> CVE-2025-46634 - Tenda RX2 Pro Password Hash Replay Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46634 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an unauthenticated attacker to authenticate to the web management portal by collecting credentials from observed/collected traffic. It implements encryption, but not until after the user has transmitted the hash of their password in cleartext. The hash can be replayed to authenticate. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46634"> read more </a> </article> <hr> <article> <h3> CVE-2025-46635 - Tenda RX2 Pro Router Guest Wi-Fi Network Isolation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46635 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>An issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between the guest Wi-Fi network and other network interfaces on the router allows an attacker (who is authenticated to the guest Wi-Fi) to access resources on the router and/or resources and devices on other networks hosted by the router by configuring a static IP address (within the non-guest subnet) on their host. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46635"> read more </a> </article> <hr> <article> <h3> CVE-2025-29763 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-29763 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Rejected reason: “This CVE ID is Rejected and will not be used. The issue was determined to not be a vulnerability.” <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29763"> read more </a> </article> <hr> <article> <h3> CVE-2025-46569 - Open Policy Agent (OPA) HTTP Data API Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46569 <br> <strong>Published : </strong> May 1, 2025, 8:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a single data document reference is constructed from the requested path. This query is then used for policy evaluation. A HTTP request path can be crafted in a way that injects Rego code into the constructed query. The evaluation result cannot be made to return any other data than what is generated by the requested path, but this path can be misdirected, and the injected Rego code can be crafted to make the query succeed or fail; opening up for oracle attacks or, given the right circumstances, erroneous policy decision results. Furthermore, the injected code can be crafted to be computationally expensive, resulting in a Denial Of Service (DoS) attack. This issue has been patched in version 1.4.0. A workaround involves having network access to OPA’s RESTful APIs being limited to `localhost` and/or trusted networks, unless necessary for production reasons. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46569"> read more </a> </article> <hr> <article> <h3> CVE-2025-24522 - KUNBUS Revolution Pi Node-RED Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-24522 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24522"> read more </a> </article> <hr> <article> <h3> CVE-2025-32011 - KUNBUS PiCtory Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32011 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32011"> read more </a> </article> <hr> <article> <h3> CVE-2025-35975 - MicroDicom DICOM Viewer Out-of-Bounds Write RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-35975 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35975"> read more </a> </article> <hr> <article> <h3> CVE-2025-35996 - KUNBUS PiCtory Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-35996 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, the filename could be executed as HTML script tag resulting in a cross-site-scripting attack. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35996"> read more </a> </article> <hr> <article> <h3> CVE-2025-36521 - MicroDicom DICOM Viewer Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-36521 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application. The user must open a malicious DCM file for exploitation. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36521"> read more </a> </article> <hr> <article> <h3> CVE-2025-36558 - KUNBUS PiCtory Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-36558 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the sso_token used for authentication. If an attacker provides the user with a PiCtory URL containing an HTML script as an sso_token, that script will reply to the user and be executed. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36558"> read more </a> </article> <hr> <article> <h3> CVE-2025-3517 - Devolutions Server PAM JIT Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3517 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>Privilege context switching error in PAM JIT feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM JIT account password to be improperly reset after usage via specific actions such as editing the username. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3517"> read more </a> </article> <hr> <article> <h3> CVE-2025-4174 - PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4174 <br> <strong>Published : </strong> May 1, 2025, 7:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4174"> read more </a> </article> <hr> <article> <h3> CVE-2025-46565 - Vite File Pattern Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46565 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. Only files that are under project root and are denied by a file matching pattern can be bypassed. `server.fs.deny` can contain patterns matching against files (by default it includes .env, .env.*, *.{crt,pem} as such patterns). These patterns were able to bypass for files under `root` by using a combination of slash and dot (/.). This issue has been patched in versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46565"> read more </a> </article> <hr> <article> <h3> CVE-2025-46566 - DataEase Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46566 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46566"> read more </a> </article> <hr> <article> <h3> CVE-2025-46567 - LLaMA Factory Deserialization Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46567 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the LLaMA-Factory project. The script performs insecure deserialization using `torch.load()` on user-supplied `.bin` files from an input directory. An attacker can exploit this behavior by crafting a malicious `.bin` file that executes arbitrary commands during deserialization. This issue has been patched in version 1.0.0. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46567"> read more </a> </article> <hr> <article> <h3> CVE-2025-46568 - Stirling-PDF SSRF-Induced Arbitrary File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46568 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 2 hours, 27 minutes ago <br> <strong>Description : </strong>Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerable to SSRF-induced arbitrary file read. WeasyPrint redefines a set of HTML tags, including img, embed, object, and others. The references to several files inside, allow the attachment of content from any webpage or local file to a PDF. This allows the attacker to read any file on the server, including sensitive files and configuration files. All users utilizing this feature will be affected. This issue has been patched in version 0.45.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46568"> read more </a> </article> <hr> <article> <h3> CVE-2025-32881 - GoTenna Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32881 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32881"> read more </a> </article> <hr> <article> <h3> CVE-2025-32882 - GoTenna Encryption Malleability Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32882 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32882"> read more </a> </article> <hr> <article> <h3> CVE-2025-32883 - goTenna Mesh RCE via Software Defined Radio </h3> <p> <strong>CVE ID : </strong>CVE-2025-32883 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The app there makes it possible to inject any custom message (into existing mesh networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32883"> read more </a> </article> <hr> <article> <h3> CVE-2025-32884 - goTenna Mesh Phone Number Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32884 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32884"> read more </a> </article> <hr> <article> <h3> CVE-2025-32885 - "GoTenna v1 App Message Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-32885 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message (into existing v1 networks) with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted environment or if the cryptography has already been compromised. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32885"> read more </a> </article> <hr> <article> <h3> CVE-2025-32886 - goTenna Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32886 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32886"> read more </a> </article> <hr> <article> <h3> CVE-2025-32887 - GoTenna Frequency Hopping Command Channel Interception Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32887 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. A command channel includes the next hop. which can be intercepted and used to break frequency hopping. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32887"> read more </a> </article> <hr> <article> <h3> CVE-2025-32888 - GoTenna Mesh Hardcoded Verification Token Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32888 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32888"> read more </a> </article> <hr> <article> <h3> CVE-2025-32889 - goTenna Hardcoded Verification Token Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32889 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32889"> read more </a> </article> <hr> <article> <h3> CVE-2025-32890 - goTenna Mesh Plaintext Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32890 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32890"> read more </a> </article> <hr> <article> <h3> CVE-2025-44860 - TOTOLINK CA300-POE Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44860 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44860"> read more </a> </article> <hr> <article> <h3> CVE-2025-44861 - TOTOLINK CA300-POE Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-44861 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44861"> read more </a> </article> <hr> <article> <h3> CVE-2025-44862 - TOTOLINK CA300-POE Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44862 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44862"> read more </a> </article> <hr> <article> <h3> CVE-2025-44863 - TOTOLINK CA300-POE Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44863 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44863"> read more </a> </article> <hr> <article> <h3> CVE-2025-44864 - Tenda W20E Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44864 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44864"> read more </a> </article> <hr> <article> <h3> CVE-2025-44865 - Tenda W20E Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44865 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44865"> read more </a> </article> <hr> <article> <h3> CVE-2025-44866 - Tenda W20E Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44866 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44866"> read more </a> </article> <hr> <article> <h3> CVE-2025-44867 - Tenda W20E Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44867 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44867"> read more </a> </article> <hr> <article> <h3> CVE-2025-46337 - ADOdb PostgreSQL SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46337 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46337"> read more </a> </article> <hr> <article> <h3> CVE-2025-46345 - Auth0 Account Link Extension JWT Signature Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46345 <br> <strong>Published : </strong> May 1, 2025, 6:15 p.m. | 27 minutes ago <br> <strong>Description : </strong>Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify the signature of the provided JWT. This allows the user the ability to supply a forged token and the potential to access user information without proper authorization. This issue has been patched in versions 2.6.7, 2.7.0, and 3.0.0. It is recommended to upgrade to version 3.0.0 or greater. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46345"> read more </a> </article> <hr> <article> <h3> CVE-2025-4173 - SourceCodester Online Eyewear Shop SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4173 <br> <strong>Published : </strong> May 1, 2025, 5:15 p.m. | 1 hour, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_cart of the file /oews/classes/Master.php?f=delete_cart. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4173"> read more </a> </article> <hr> <article> <h3> CVE-2022-49911 - Linux kernel netfilter ipset Memory Allocation Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2022-49911 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: enforce documented limit to prevent allocating huge memory Daniel Xu reported that the hash:net,iface type of the ipset subsystem does not limit adding the same network with different interfaces to a set, which can lead to huge memory usage or allocation failure. The quick reproducer is $ ipset create ACL.IN.ALL_PERMIT hash:net,iface hashsize 1048576 timeout 0 $ for i in $(seq 0 100); do /sbin/ipset add ACL.IN.ALL_PERMIT 0.0.0.0/0,kaf_$i timeout 0 -exist; done The backtrace when vmalloc fails: [Tue Oct 25 00:13:08 2022] ipset: vmalloc error: size 1073741848, exceeds total pages <...> [Tue Oct 25 00:13:08 2022] Call Trace: [Tue Oct 25 00:13:08 2022] <TASK> [Tue Oct 25 00:13:08 2022] dump_stack_lvl+0x48/0x60 [Tue Oct 25 00:13:08 2022] warn_alloc+0x155/0x180 [Tue Oct 25 00:13:08 2022] __vmalloc_node_range+0x72a/0x760 [Tue Oct 25 00:13:08 2022] ? hash_netiface4_add+0x7c0/0xb20 [Tue Oct 25 00:13:08 2022] ? __kmalloc_large_node+0x4a/0x90 [Tue Oct 25 00:13:08 2022] kvmalloc_node+0xa6/0xd0 [Tue Oct 25 00:13:08 2022] ? hash_netiface4_resize+0x99/0x710 <...> The fix is to enforce the limit documented in the ipset(8) manpage: > The internal restriction of the hash:net,iface set type is that the same > network prefix cannot be stored with more than 64 different interfaces > in a single set. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49911"> read more </a> </article> <hr> <article> <h3> CVE-2022-49912 - Linux Btrfs Ulist Leak </h3> <p> <strong>CVE ID : </strong>CVE-2022-49912 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "old_roots" ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49912"> read more </a> </article> <hr> <article> <h3> CVE-2022-49913 - Linux Btrfs Inode List Leak </h3> <p> <strong>CVE ID : </strong>CVE-2022-49913 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at find_parent_nodes() During backref walking, at find_parent_nodes(), if we are dealing with a data extent and we get an error while resolving the indirect backrefs, at resolve_indirect_refs(), or in the while loop that iterates over the refs in the direct refs rbtree, we end up leaking the inode lists attached to the direct refs we have in the direct refs rbtree that were not yet added to the refs ulist passed as argument to find_parent_nodes(). Since they were not yet added to the refs ulist and prelim_release() does not free the lists, on error the caller can only free the lists attached to the refs that were added to the refs ulist, all the remaining refs get their inode lists never freed, therefore leaking their memory. Fix this by having prelim_release() always free any attached inode list to each ref found in the rbtree, and have find_parent_nodes() set the ref's inode list to NULL once it transfers ownership of the inode list to a ref added to the refs ulist passed to find_parent_nodes(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49913"> read more </a> </article> <hr> <article> <h3> CVE-2022-49914 - "Btrfs inode list leak vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2022-49914 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at resolve_indirect_refs() During backref walking, at resolve_indirect_refs(), if we get an error we jump to the 'out' label and call ulist_free() on the 'parents' ulist, which frees all the elements in the ulist - however that does not free any inode lists that may be attached to elements, through the 'aux' field of a ulist node, so we end up leaking lists if we have any attached to the unodes. Fix this by calling free_leaf_list() instead of ulist_free() when we exit from resolve_indirect_refs(). The static function free_leaf_list() is moved up for this to be possible and it's slightly simplified by removing unnecessary code. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49914"> read more </a> </article> <hr> <article> <h3> CVE-2022-49915 - Linux kernel mISDN driver Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49915 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamically, add put_device() to give up the reference, so that the name can be freed in kobject_cleanup() when the refcount is 0. Set device class before put_device() to avoid null release() function WARN message in device_release(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49915"> read more </a> </article> <hr> <article> <h3> CVE-2022-49916 - Linux Rose NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49916 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rose_send_frame() The syzkaller reported an issue: KASAN: null-ptr-deref in range [0x0000000000000380-0x0000000000000387] CPU: 0 PID: 4069 Comm: kworker/0:15 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Workqueue: rcu_gp srcu_invoke_callbacks RIP: 0010:rose_send_frame+0x1dd/0x2f0 net/rose/rose_link.c:101 Call Trace: <IRQ> rose_transmit_clear_request+0x1d5/0x290 net/rose/rose_link.c:255 rose_rx_call_request+0x4c0/0x1bc0 net/rose/af_rose.c:1009 rose_loopback_timer+0x19e/0x590 net/rose/rose_loopback.c:111 call_timer_fn+0x1a0/0x6b0 kernel/time/timer.c:1474 expire_timers kernel/time/timer.c:1519 [inline] __run_timers.part.0+0x674/0xa80 kernel/time/timer.c:1790 __run_timers kernel/time/timer.c:1768 [inline] run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1803 __do_softirq+0x1d0/0x9c8 kernel/softirq.c:571 [...] </IRQ> It triggers NULL pointer dereference when 'neigh->dev->dev_addr' is called in the rose_send_frame(). It's the first occurrence of the `neigh` is in rose_loopback_timer() as `rose_loopback_neigh', and the 'dev' in 'rose_loopback_neigh' is initialized sa nullptr. It had been fixed by commit 3b3fd068c56e3fbea30090859216a368398e39bf ("rose: Fix Null pointer dereference in rose_send_frame()") ever. But it's introduced by commit 3c53cd65dece47dd1f9d3a809f32e59d1d87b2b8 ("rose: check NULL rose_loopback_neigh->loopback") again. We fix it by add NULL check in rose_transmit_clear_request(). When the 'dev' in 'neigh' is NULL, we don't reply the request and just clear it. syzkaller don't provide repro, and I provide a syz repro like: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'rose0\x00', 0x201}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev, @null, 0x0, [@null, @null, @netrom, @netrom, @default, @null]}, 0x40) connect$rose(r1, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49916"> read more </a> </article> <hr> <article> <h3> CVE-2022-49917 - Linux Kernel ipvs Proc Entry Removal Warning </h3> <p> <strong>CVE ID : </strong>CVE-2022-49917 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ip_vs_app_net_cleanup() During the initialization of ip_vs_app_net_init(), if file ip_vs_app fails to be created, the initialization is successful by default. Therefore, the ip_vs_app file doesn't be found during the remove in ip_vs_app_net_cleanup(). It will cause WRNING. The following is the stack information: name 'ip_vs_app' WARNING: CPU: 1 PID: 9 at fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 Modules linked in: Workqueue: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Call Trace: <TASK> ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 </TASK> <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49917"> read more </a> </article> <hr> <article> <h3> CVE-2022-49918 - Linux Kernel ipvs proc_entry Double Free </h3> <p> <strong>CVE ID : </strong>CVE-2022-49918 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in __ip_vs_cleanup_batch() During the initialization of ip_vs_conn_net_init(), if file ip_vs_conn or ip_vs_conn_sync fails to be created, the initialization is successful by default. Therefore, the ip_vs_conn or ip_vs_conn_sync file doesn't be found during the remove. The following is the stack information: name 'ip_vs_conn_sync' WARNING: CPU: 3 PID: 9 at fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 Modules linked in: Workqueue: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Call Trace: <TASK> __ip_vs_cleanup_batch+0x7d/0x120 ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 </TASK> <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49918"> read more </a> </article> <hr> <article> <h3> CVE-2022-49919 - Netfilter NF Tables Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49919 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49919"> read more </a> </article> <hr> <article> <h3> CVE-2022-49920 - Linux kernel Netfilter Netlink Notifier Race Condition </h3> <p> <strong>CVE ID : </strong>CVE-2022-49920 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: netlink notifier might race to release objects commit release path is invoked via call_rcu and it runs lockless to release the objects after rcu grace period. The netlink notifier handler might win race to remove objects that the transaction context is still referencing from the commit release path. Call rcu_barrier() to ensure pending rcu callbacks run to completion if the list of transactions to be destroyed is not empty. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49920"> read more </a> </article> <hr> <article> <h3> CVE-2022-49921 - Linux Kernel Net Scheduler Use After Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49921 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it to qdisc_enqueue(). This is basically identical to commit 2f09707d0c97 ("sch_sfb: Also store skb len before calling child enqueue"). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49921"> read more </a> </article> <hr> <article> <h3> CVE-2022-49922 - Linux Kernel NFC Driver Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49922 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() nfcmrvl_i2c_nci_send() will be called by nfcmrvl_nci_send(), and skb should be freed in nfcmrvl_i2c_nci_send(). However, nfcmrvl_nci_send() will only free skb when i2c_master_send() return >=0, which means skb will memleak when i2c_master_send() failed. Free skb no matter whether i2c_master_send() succeeds. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49922"> read more </a> </article> <hr> <article> <h3> CVE-2022-49923 - Linux Kernel NXP NCI Memory Leak </h3> <p> <strong>CVE ID : </strong>CVE-2022-49923 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() nxp_nci_send() will call nxp_nci_i2c_write(), and only free skb when nxp_nci_i2c_write() failed. However, even if the nxp_nci_i2c_write() run succeeds, the skb will not be freed in nxp_nci_i2c_write(). As the result, the skb will memleak. nxp_nci_send() should also free the skb when nxp_nci_i2c_write() succeeds. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49923"> read more </a> </article> <hr> <article> <h3> CVE-2022-49924 - Linux Kernel NFC FDP Memory Leak </h3> <p> <strong>CVE ID : </strong>CVE-2022-49924 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: Fix potential memory leak in fdp_nci_send() fdp_nci_send() will call fdp_nci_i2c_write that will not free skb in the function. As a result, when fdp_nci_i2c_write() finished, the skb will memleak. fdp_nci_send() should free skb after fdp_nci_i2c_write() finished. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49924"> read more </a> </article> <hr> <article> <h3> CVE-2022-49925 - "Linux RDMA Core Null Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2022-49925 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] CPU: 1 PID: 379 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:destroy_workqueue+0x2f/0x740 RSP: 0018:ffff888016137df8 EFLAGS: 00000202 ... Call Trace: ib_core_cleanup+0xa/0xa1 [ib_core] __do_sys_delete_module.constprop.0+0x34f/0x5b0 do_syscall_64+0x3a/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa1a0d221b7 ... It is because the fail of roce_gid_mgmt_init() is ignored: ib_core_init() roce_gid_mgmt_init() gid_cache_wq = alloc_ordered_workqueue # fail ... ib_core_cleanup() roce_gid_mgmt_cleanup() destroy_workqueue(gid_cache_wq) # destroy an unallocated wq Fix this by catching the fail of roce_gid_mgmt_init() in ib_core_init(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49925"> read more </a> </article> <hr> <article> <h3> CVE-2022-49926 - Linux kernel - DSA Loop Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49926 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsa_loop_init() kmemleak reported memory leaks in dsa_loop_init(): kmemleak: 12 new suspected memory leaks unreferenced object 0xffff8880138ce000 (size 2048): comm "modprobe", pid 390, jiffies 4295040478 (age 238.976s) backtrace: [<000000006a94f1d5>] kmalloc_trace+0x26/0x60 [<00000000a9c44622>] phy_device_create+0x5d/0x970 [<00000000d0ee2afc>] get_phy_device+0xf3/0x2b0 [<00000000dca0c71f>] __fixed_phy_register.part.0+0x92/0x4e0 [<000000008a834798>] fixed_phy_register+0x84/0xb0 [<0000000055223fcb>] dsa_loop_init+0xa9/0x116 [dsa_loop] ... There are two reasons for memleak in dsa_loop_init(). First, fixed_phy_register() create and register phy_device: fixed_phy_register() get_phy_device() phy_device_create() # freed by phy_device_free() phy_device_register() # freed by phy_device_remove() But fixed_phy_unregister() only calls phy_device_remove(). So the memory allocated in phy_device_create() is leaked. Second, when mdio_driver_register() fail in dsa_loop_init(), it just returns and there is no cleanup for phydevs. Fix the problems by catching the error of mdio_driver_register() in dsa_loop_init(), then calling both fixed_phy_unregister() and phy_device_free() to release phydevs. Also add a function for phydevs cleanup to avoid duplacate. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49926"> read more </a> </article> <hr> <article> <h3> CVE-2022-49927 - Linux NFS kmemleak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49927 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots will leak: unreferenced object 0xffff8881115aa100 (size 64): comm ""mount.nfs"", pid 679, jiffies 4294744957 (age 115.037s) hex dump (first 32 bytes): 00 cc 19 73 81 88 ff ff 00 a0 5a 11 81 88 ff ff ...s......Z..... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000007a4c434a>] nfs4_find_or_create_slot+0x8e/0x130 [<000000005472a39c>] nfs4_realloc_slot_table+0x23f/0x270 [<00000000cd8ca0eb>] nfs40_init_client+0x4a/0x90 [<00000000128486db>] nfs4_init_client+0xce/0x270 [<000000008d2cacad>] nfs4_set_client+0x1a2/0x2b0 [<000000000e593b52>] nfs4_create_server+0x300/0x5f0 [<00000000e4425dd2>] nfs4_try_get_tree+0x65/0x110 [<00000000d3a6176f>] vfs_get_tree+0x41/0xf0 [<0000000016b5ad4c>] path_mount+0x9b3/0xdd0 [<00000000494cae71>] __x64_sys_mount+0x190/0x1d0 [<000000005d56bdec>] do_syscall_64+0x35/0x80 [<00000000687c9ae4>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49927"> read more </a> </article> <hr> <article> <h3> CVE-2022-49928 - Linux Kernel SUNRPC Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49928 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed There is a null-ptr-deref when xps sysfs alloc failed: BUG: KASAN: null-ptr-deref in sysfs_do_create_link_sd+0x40/0xd0 Read of size 8 at addr 0000000000000030 by task gssproxy/457 CPU: 5 PID: 457 Comm: gssproxy Not tainted 6.0.0-09040-g02357b27ee03 #9 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 kasan_report+0xa3/0x120 sysfs_do_create_link_sd+0x40/0xd0 rpc_sysfs_client_setup+0x161/0x1b0 rpc_new_client+0x3fc/0x6e0 rpc_create_xprt+0x71/0x220 rpc_create+0x1d4/0x350 gssp_rpc_create+0xc3/0x160 set_gssp_clnt+0xbc/0x140 write_gssp+0x116/0x1a0 proc_reg_write+0xd6/0x130 vfs_write+0x177/0x690 ksys_write+0xb9/0x150 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 When the xprt_switch sysfs alloc failed, should not add xprt and switch sysfs to it, otherwise, maybe null-ptr-deref; also initialize the 'xps_sysfs' to NULL to avoid oops when destroy it. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49928"> read more </a> </article> <hr> <article> <h3> CVE-2022-49929 - "RDMA rxe Memory Reference Count Leak Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2022-49929 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix mr leak in RESPST_ERR_RNR rxe_recheck_mr() will increase mr's ref_cnt, so we should call rxe_put(mr) to drop mr's ref_cnt in RESPST_ERR_RNR to avoid below warning: WARNING: CPU: 0 PID: 4156 at drivers/infiniband/sw/rxe/rxe_pool.c:259 __rxe_cleanup+0x1df/0x240 [rdma_rxe] ... Call Trace: rxe_dereg_mr+0x4c/0x60 [rdma_rxe] ib_dereg_mr_user+0xa8/0x200 [ib_core] ib_mr_pool_destroy+0x77/0xb0 [ib_core] nvme_rdma_destroy_queue_ib+0x89/0x240 [nvme_rdma] nvme_rdma_free_queue+0x40/0x50 [nvme_rdma] nvme_rdma_teardown_io_queues.part.0+0xc3/0x120 [nvme_rdma] nvme_rdma_error_recovery_work+0x4d/0xf0 [nvme_rdma] process_one_work+0x582/0xa40 ? pwq_dec_nr_in_flight+0x100/0x100 ? rwlock_bug.part.0+0x60/0x60 worker_thread+0x2a9/0x700 ? process_one_work+0xa40/0xa40 kthread+0x168/0x1a0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49929"> read more </a> </article> <hr> <article> <h3> CVE-2022-49930 - Hewlett Packard Enterprise RDMA NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-49930 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer problem in free_mr_init() Lock grab occurs in a concurrent scenario, resulting in stepping on a NULL pointer. It should be init mutex_init() first before use the lock. Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Call trace: __mutex_lock.constprop.0+0xd0/0x5c0 __mutex_lock_slowpath+0x1c/0x2c mutex_lock+0x44/0x50 free_mr_send_cmd_to_hw+0x7c/0x1c0 [hns_roce_hw_v2] hns_roce_v2_dereg_mr+0x30/0x40 [hns_roce_hw_v2] hns_roce_dereg_mr+0x4c/0x130 [hns_roce_hw_v2] ib_dereg_mr_user+0x54/0x124 uverbs_free_mr+0x24/0x30 destroy_hw_idr_uobject+0x38/0x74 uverbs_destroy_uobject+0x48/0x1c4 uobj_destroy+0x74/0xcc ib_uverbs_cmd_verbs+0x368/0xbb0 ib_uverbs_ioctl+0xec/0x1a4 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x50/0x120 el0_svc_common.constprop.0+0x58/0x190 do_el0_svc+0x30/0x90 el0_svc+0x2c/0xb4 el0t_64_sync_handler+0x1a4/0x1b0 el0t_64_sync+0x19c/0x1a0 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49930"> read more </a> </article> <hr> <article> <h3> CVE-2022-49931 - IBM HFI1 Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2022-49931 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash. The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen: BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 The fix is to use the correct call to move the list. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-49931"> read more </a> </article> <hr> <article> <h3> CVE-2025-23246 - NVIDIA vGPU Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23246 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23246"> read more </a> </article> <hr> <article> <h3> CVE-2025-44836 - TOTOLINK CPE CP900 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44836 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44836"> read more </a> </article> <hr> <article> <h3> CVE-2025-44837 - Totolink CPE CP900 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44837 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44837"> read more </a> </article> <hr> <article> <h3> CVE-2025-44838 - TOTOLINK CPE CP900 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44838 <br> <strong>Published : </strong> May 1, 2025, 3:16 p.m. | 1 hour, 8 minutes ago <br> <strong>Description : </strong>TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44838"> read more </a> </article> <hr> <article> <h3> CVE-2025-37773 - "virtiofs NULL Source Name Check Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37773 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, during fuzz testing, the source name may be NULL, which could lead to a kernel panic. Therefore, an extra check for the source name should be added. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37773"> read more </a> </article> <hr> <article> <h3> CVE-2025-37774 - Linux Kernel Slab Object Extensions Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37774 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with __alloc_tagging_slab_alloc_hook() at the top of the crash call stack. The signature indicates an invalid address dereference with low bits of slab->obj_exts being set. The bits were outside of the range used by page_memcg_data_flags and objext_flags and hence were not masked out by slab_obj_exts() when obtaining the pointer stored in slab->obj_exts. The typical crash log looks like this: 00510 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 00510 Mem abort info: 00510 ESR = 0x0000000096000045 00510 EC = 0x25: DABT (current EL), IL = 32 bits 00510 SET = 0, FnV = 0 00510 EA = 0, S1PTW = 0 00510 FSC = 0x05: level 1 translation fault 00510 Data abort info: 00510 ISV = 0, ISS = 0x00000045, ISS2 = 0x00000000 00510 CM = 0, WnR = 1, TnD = 0, TagAccess = 0 00510 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 00510 user pgtable: 4k pages, 39-bit VAs, pgdp=0000000104175000 00510 [0000000000000010] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 00510 Internal error: Oops: 0000000096000045 [#1] SMP 00510 Modules linked in: 00510 CPU: 10 UID: 0 PID: 7692 Comm: cat Not tainted 6.15.0-rc1-ktest-g189e17946605 #19327 NONE 00510 Hardware name: linux,dummy-virt (DT) 00510 pstate: 20001005 (nzCv daif -PAN -UAO -TCO -DIT +SSBS BTYPE=--) 00510 pc : __alloc_tagging_slab_alloc_hook+0xe0/0x190 00510 lr : __kmalloc_noprof+0x150/0x310 00510 sp : ffffff80c87df6c0 00510 x29: ffffff80c87df6c0 x28: 000000000013d1ff x27: 000000000013d200 00510 x26: ffffff80c87df9e0 x25: 0000000000000000 x24: 0000000000000001 00510 x23: ffffffc08041953c x22: 000000000000004c x21: ffffff80c0002180 00510 x20: fffffffec3120840 x19: ffffff80c4821000 x18: 0000000000000000 00510 x17: fffffffec3d02f00 x16: fffffffec3d02e00 x15: fffffffec3d00700 00510 x14: fffffffec3d00600 x13: 0000000000000200 x12: 0000000000000006 00510 x11: ffffffc080bb86c0 x10: 0000000000000000 x9 : ffffffc080201e58 00510 x8 : ffffff80c4821060 x7 : 0000000000000000 x6 : 0000000055555556 00510 x5 : 0000000000000001 x4 : 0000000000000010 x3 : 0000000000000060 00510 x2 : 0000000000000000 x1 : ffffffc080f50cf8 x0 : ffffff80d801d000 00510 Call trace: 00510 __alloc_tagging_slab_alloc_hook+0xe0/0x190 (P) 00510 __kmalloc_noprof+0x150/0x310 00510 __bch2_folio_create+0x5c/0xf8 00510 bch2_folio_create+0x2c/0x40 00510 bch2_readahead+0xc0/0x460 00510 read_pages+0x7c/0x230 00510 page_cache_ra_order+0x244/0x3a8 00510 page_cache_async_ra+0x124/0x170 00510 filemap_readahead.isra.0+0x58/0xa0 00510 filemap_get_pages+0x454/0x7b0 00510 filemap_read+0xdc/0x418 00510 bch2_read_iter+0x100/0x1b0 00510 vfs_read+0x214/0x300 00510 ksys_read+0x6c/0x108 00510 __arm64_sys_read+0x20/0x30 00510 invoke_syscall.constprop.0+0x54/0xe8 00510 do_el0_svc+0x44/0xc8 00510 el0_svc+0x18/0x58 00510 el0t_64_sync_handler+0x104/0x130 00510 el0t_64_sync+0x154/0x158 00510 Code: d5384100 f9401c01 b9401aa3 b40002e1 (f8227881) 00510 ---[ end trace 0000000000000000 ]--- 00510 Kernel panic - not syncing: Oops: Fatal exception 00510 SMP: stopping secondary CPUs 00510 Kernel Offset: disabled 00510 CPU features: 0x0000,000000e0,00000410,8240500b 00510 Memory Limit: none Investigation indicates that these bits are already set when we allocate slab page and are not zeroed out after allocation. We are not yet sure why these crashes start happening only recently but regardless of the reason, not initializing a field that gets used later is wrong. Fix it by initializing slab->obj_exts during slab page allocation. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37774"> read more </a> </article> <hr> <article> <h3> CVE-2025-37775 - "Microsoft Windows Ksmbd Directory Write Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37775 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from __kernel_write_iter [ 2110.972290] ------------[ cut here ]------------ [ 2110.972301] WARNING: CPU: 3 PID: 735 at fs/read_write.c:599 __kernel_write_iter+0x21b/0x280 This patch doesn't allow writing to directory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37775"> read more </a> </article> <hr> <article> <h3> CVE-2025-37776 - Linux ksmbd Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37776 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_all_levII_oplock that can cause racy issues when unlocking in the middle of the loop. This patch use read lock to protect whole loop. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37776"> read more </a> </article> <hr> <article> <h3> CVE-2025-37777 - KSMbd Use-After-Free Vuln </h3> <p> <strong>CVE ID : </strong>CVE-2025-37777 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free. If ksmbd connection is referenced when ksmbd server thread terminates, It will not be freed, but conn->tcp_transport is freed. __smb2_lease_break_noti can be performed asynchronously when the connection is disconnected. __smb2_lease_break_noti calls ksmbd_conn_write, which can cause use-after-free when conn->ksmbd_transport is already freed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37777"> read more </a> </article> <hr> <article> <h3> CVE-2025-37778 - Kerberos SMBD Dangling Pointer </h3> <p> <strong>CVE ID : </strong>CVE-2025-37778 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer to NULL. It calls ksmbd_krb5_authenticate to reinitialise sess->user but that function may return without doing so. If that happens then smb2_sess_setup, which calls krb_authenticate, will be accessing free'd memory when it later uses sess->user. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37778"> read more </a> </article> <hr> <article> <h3> CVE-2025-37779 - "ERofs Linux Kernel Folio UAF Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37779 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in bvec are coalesced across a folio bounary. The refcount of all non-slab folios should be increased to ensure p9_releas_pages can put them correctly. BUG: Bad page state in process md5sum pfn:18300 page: refcount:0 mapcount:0 mapping:00000000d5ad8e4e index:0x60 pfn:0x18300 head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 aops:z_erofs_aops ino:30b0f dentry name(?):"GoogleExtServicesCn.apk" flags: 0x100000000000041(locked|head|node=0|zone=1) raw: 0100000000000041 dead000000000100 dead000000000122 ffff888014b13bd0 raw: 0000000000000060 0000000000000020 00000000ffffffff 0000000000000000 head: 0100000000000041 dead000000000100 dead000000000122 ffff888014b13bd0 head: 0000000000000060 0000000000000020 00000000ffffffff 0000000000000000 head: 0100000000000000 0000000000000000 ffffffffffffffff 0000000000000000 head: 0000000000000010 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Call Trace: dump_stack_lvl+0x53/0x70 bad_page+0xd4/0x220 __free_pages_ok+0x76d/0xf30 __folio_put+0x230/0x320 p9_release_pages+0x179/0x1f0 p9_virtio_zc_request+0xa2a/0x1230 p9_client_zc_rpc.constprop.0+0x247/0x700 p9_client_read_once+0x34d/0x810 p9_client_read+0xf3/0x150 v9fs_issue_read+0x111/0x360 netfs_unbuffered_read_iter_locked+0x927/0x1390 netfs_unbuffered_read_iter+0xa2/0xe0 vfs_iocb_iter_read+0x2c7/0x460 erofs_fileio_rq_submit+0x46b/0x5b0 z_erofs_runqueue+0x1203/0x21e0 z_erofs_readahead+0x579/0x8b0 read_pages+0x19f/0xa70 page_cache_ra_order+0x4ad/0xb80 filemap_readahead.isra.0+0xe7/0x150 filemap_get_pages+0x7aa/0x1890 filemap_read+0x320/0xc80 vfs_read+0x6c6/0xa30 ksys_read+0xf9/0x1c0 do_syscall_64+0x9e/0x1a0 entry_SYSCALL_64_after_hwframe+0x71/0x79 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37779"> read more </a> </article> <hr> <article> <h3> CVE-2025-37780 - Linux Kernel Isofs Fid Handle Bytes Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37780 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofs_fh_to_parent. [1] The handle_bytes value passed in by the reproducing program is equal to 12. In handle_to_path(), only 12 bytes of memory are allocated for the structure file_handle->f_handle member, which causes an out-of-bounds access when accessing the member parent_block of the structure isofs_fid in isofs, because accessing parent_block requires at least 16 bytes of f_handle. Here, fh_len is used to indirectly confirm that the value of handle_bytes is greater than 3 before accessing parent_block. [1] BUG: KASAN: slab-out-of-bounds in isofs_fh_to_parent+0x1b8/0x210 fs/isofs/export.c:183 Read of size 4 at addr ffff0000cc030d94 by task syz-executor215/6466 CPU: 1 UID: 0 PID: 6466 Comm: syz-executor215 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C) __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0x198/0x550 mm/kasan/report.c:521 kasan_report+0xd8/0x138 mm/kasan/report.c:634 __asan_report_load4_noabort+0x20/0x2c mm/kasan/report_generic.c:380 isofs_fh_to_parent+0x1b8/0x210 fs/isofs/export.c:183 exportfs_decode_fh_raw+0x2dc/0x608 fs/exportfs/expfs.c:523 do_handle_to_path+0xa0/0x198 fs/fhandle.c:257 handle_to_path fs/fhandle.c:385 [inline] do_handle_open+0x8cc/0xb8c fs/fhandle.c:403 __do_sys_open_by_handle_at fs/fhandle.c:443 [inline] __se_sys_open_by_handle_at fs/fhandle.c:434 [inline] __arm64_sys_open_by_handle_at+0x80/0x94 fs/fhandle.c:434 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 Allocated by task 6466: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_alloc_info+0x40/0x50 mm/kasan/generic.c:562 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0xac/0xc4 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4294 [inline] __kmalloc_noprof+0x32c/0x54c mm/slub.c:4306 kmalloc_noprof include/linux/slab.h:905 [inline] handle_to_path fs/fhandle.c:357 [inline] do_handle_open+0x5a4/0xb8c fs/fhandle.c:403 __do_sys_open_by_handle_at fs/fhandle.c:443 [inline] __se_sys_open_by_handle_at fs/fhandle.c:434 [inline] __arm64_sys_open_by_handle_at+0x80/0x94 fs/fhandle.c:434 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37780"> read more </a> </article> <hr> <article> <h3> CVE-2025-37781 - HP Linux Kernel i2c cros-ec-tunnel NULL Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-37781 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and the EC driver are built-in, the EC parent device will not be found, leading to NULL pointer dereference. That can also be reproduced by unbinding the controller driver and then loading i2c-cros-ec-tunnel module (or binding the device). [ 271.991245] BUG: kernel NULL pointer dereference, address: 0000000000000058 [ 271.998215] #PF: supervisor read access in kernel mode [ 272.003351] #PF: error_code(0x0000) - not-present page [ 272.008485] PGD 0 P4D 0 [ 272.011022] Oops: Oops: 0000 [#1] SMP NOPTI [ 272.015207] CPU: 0 UID: 0 PID: 3859 Comm: insmod Tainted: G S 6.15.0-rc1-00004-g44722359ed83 #30 PREEMPT(full) 3c7fb39a552e7d949de2ad921a7d6588d3a4fdc5 [ 272.030312] Tainted: [S]=CPU_OUT_OF_SPEC [ 272.034233] Hardware name: HP Berknip/Berknip, BIOS Google_Berknip.13434.356.0 05/17/2021 [ 272.042400] RIP: 0010:ec_i2c_probe+0x2b/0x1c0 [i2c_cros_ec_tunnel] [ 272.048577] Code: 1f 44 00 00 41 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 05 06 a0 6c e7 48 89 44 24 08 4c 8d 7f 10 48 8b 47 50 4c 8b 60 78 <49> 83 7c 24 58 00 0f 84 2f 01 00 00 48 89 fb be 30 06 00 00 4c 9 [ 272.067317] RSP: 0018:ffffa32082a03940 EFLAGS: 00010282 [ 272.072541] RAX: ffff969580b6a810 RBX: ffff969580b68c10 RCX: 0000000000000000 [ 272.079672] RDX: 0000000000000000 RSI: 0000000000000282 RDI: ffff969580b68c00 [ 272.086804] RBP: 00000000fffffdfb R08: 0000000000000000 R09: 0000000000000000 [ 272.093936] R10: 0000000000000000 R11: ffffffffc0600000 R12: 0000000000000000 [ 272.101067] R13: ffffffffa666fbb8 R14: ffffffffc05b5528 R15: ffff969580b68c10 [ 272.108198] FS: 00007b930906fc40(0000) GS:ffff969603149000(0000) knlGS:0000000000000000 [ 272.116282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.122024] CR2: 0000000000000058 CR3: 000000012631c000 CR4: 00000000003506f0 [ 272.129155] Call Trace: [ 272.131606] <TASK> [ 272.133709] ? acpi_dev_pm_attach+0xdd/0x110 [ 272.137985] platform_probe+0x69/0xa0 [ 272.141652] really_probe+0x152/0x310 [ 272.145318] __driver_probe_device+0x77/0x110 [ 272.149678] driver_probe_device+0x1e/0x190 [ 272.153864] __driver_attach+0x10b/0x1e0 [ 272.157790] ? driver_attach+0x20/0x20 [ 272.161542] bus_for_each_dev+0x107/0x150 [ 272.165553] bus_add_driver+0x15d/0x270 [ 272.169392] driver_register+0x65/0x110 [ 272.173232] ? cleanup_module+0xa80/0xa80 [i2c_cros_ec_tunnel 3a00532f3f4af4a9eade753f86b0f8dd4e4e5698] [ 272.182617] do_one_initcall+0x110/0x350 [ 272.186543] ? security_kernfs_init_security+0x49/0xd0 [ 272.191682] ? __kernfs_new_node+0x1b9/0x240 [ 272.195954] ? security_kernfs_init_security+0x49/0xd0 [ 272.201093] ? __kernfs_new_node+0x1b9/0x240 [ 272.205365] ? kernfs_link_sibling+0x105/0x130 [ 272.209810] ? kernfs_next_descendant_post+0x1c/0xa0 [ 272.214773] ? kernfs_activate+0x57/0x70 [ 272.218699] ? kernfs_add_one+0x118/0x160 [ 272.222710] ? __kernfs_create_file+0x71/0xa0 [ 272.227069] ? sysfs_add_bin_file_mode_ns+0xd6/0x110 [ 272.232033] ? internal_create_group+0x453/0x4a0 [ 272.236651] ? __vunmap_range_noflush+0x214/0x2d0 [ 272.241355] ? __free_frozen_pages+0x1dc/0x420 [ 272.245799] ? free_vmap_area_noflush+0x10a/0x1c0 [ 272.250505] ? load_module+0x1509/0x16f0 [ 272.254431] do_init_module+0x60/0x230 [ 272.258181] __se_sys_finit_module+0x27a/0x370 [ 272.262627] do_syscall_64+0x6a/0xf0 [ 272.266206] ? do_syscall_64+0x76/0xf0 [ 272.269956] ? irqentry_exit_to_user_mode+0x79/0x90 [ 272.274836] entry_SYSCALL_64_after_hwframe+0x55/0x5d [ 272.279887] RIP: 0033:0x7b9309168d39 [ 272.283466] Code: 5b 41 5c 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d af 40 0c 00 f7 d8 64 89 01 8 [ 272.302210] RSP: 002b:00007fff50f1a288 EFLAGS: 00000246 ORIG_RAX: 000 ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37781"> read more </a> </article> <hr> <article> <h3> CVE-2025-37782 - Linux HFS slub Out-of-Bounds Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-37782 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key Syzbot reported an issue in hfs subsystem: BUG: KASAN: slab-out-of-bounds in memcpy_from_page include/linux/highmem.h:423 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read fs/hfs/bnode.c:35 [inline] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 Write of size 94 at addr ffff8880123cd100 by task syz-executor237/5102 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189 __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106 memcpy_from_page include/linux/highmem.h:423 [inline] hfs_bnode_read fs/hfs/bnode.c:35 [inline] hfs_bnode_read_key+0x314/0x450 fs/hfs/bnode.c:70 hfs_brec_insert+0x7f3/0xbd0 fs/hfs/brec.c:159 hfs_cat_create+0x41d/0xa50 fs/hfs/catalog.c:118 hfs_mkdir+0x6c/0xe0 fs/hfs/dir.c:232 vfs_mkdir+0x2f9/0x4f0 fs/namei.c:4257 do_mkdirat+0x264/0x3a0 fs/namei.c:4280 __do_sys_mkdir fs/namei.c:4300 [inline] __se_sys_mkdir fs/namei.c:4298 [inline] __x64_sys_mkdir+0x6c/0x80 fs/namei.c:4298 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbdd6057a99 Add a check for key length in hfs_bnode_read_key to prevent out-of-bounds memory access. If the key length is invalid, the key buffer is cleared, improving stability and reliability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37782"> read more </a> </article> <hr> <article> <h3> CVE-2025-37783 - Linux Kernel drm/msm Error Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37783 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_virtual_atomic_check was dereferencing pointers returned by drm_atomic_get_plane_state without checking for errors. This could lead to undefined behavior if the function returns an error pointer. This commit adds checks using IS_ERR to ensure that plane_state is valid before dereferencing them. Similar to commit da29abe71e16 ("drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed"). Patchwork: https://patchwork.freedesktop.org/patch/643132/ <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37783"> read more </a> </article> <hr> <article> <h3> CVE-2025-37784 - Linux Kernel Ti Net IEP NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37784 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icss_iep_exit(), results in NULL pointer dereference for perout. To fix the null pointer dereference issue, the icss_iep_perout_enable_hw function can be modified to directly clear the IEP CMP registers when disabling PPS or PEROUT, without referencing the ptp_perout_request structure, as its contents are irrelevant in this case. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37784"> read more </a> </article> <hr> <article> <h3> CVE-2025-37786 - Linux Kernel DSA Net Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37786 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After "complete" becomes true, dsa_tree_setup_cpu_ports() or any subsequent function may fail. If that happens, the entire tree setup is in limbo: the first N-1 switches have successfully finished probing (doing nothing but having allocated persistent memory in the tree's dst->ports, and maybe dst->rtable), and switch N failed to probe, ending the tree setup process before anything is tangible from the user's PoV. If switch N fails to probe, its memory (ports) will be freed and removed from dst->ports. However, the dst->rtable elements pointing to its ports, as created by dsa_link_touch(), will remain there, and will lead to use-after-free if dereferenced. If dsa_tree_setup_switches() returns -EPROBE_DEFER, which is entirely possible because that is where ds->ops->setup() is, we get a kasan report like this: ================================================================== BUG: KASAN: slab-use-after-free in mv88e6xxx_setup_upstream_port+0x240/0x568 Read of size 8 at addr ffff000004f56020 by task kworker/u8:3/42 Call trace: __asan_report_load8_noabort+0x20/0x30 mv88e6xxx_setup_upstream_port+0x240/0x568 mv88e6xxx_setup+0xebc/0x1eb0 dsa_register_switch+0x1af4/0x2ae0 mv88e6xxx_register_switch+0x1b8/0x2a8 mv88e6xxx_probe+0xc4c/0xf60 mdio_probe+0x78/0xb8 really_probe+0x2b8/0x5a8 __driver_probe_device+0x164/0x298 driver_probe_device+0x78/0x258 __device_attach_driver+0x274/0x350 Allocated by task 42: __kasan_kmalloc+0x84/0xa0 __kmalloc_cache_noprof+0x298/0x490 dsa_switch_touch_ports+0x174/0x3d8 dsa_register_switch+0x800/0x2ae0 mv88e6xxx_register_switch+0x1b8/0x2a8 mv88e6xxx_probe+0xc4c/0xf60 mdio_probe+0x78/0xb8 really_probe+0x2b8/0x5a8 __driver_probe_device+0x164/0x298 driver_probe_device+0x78/0x258 __device_attach_driver+0x274/0x350 Freed by task 42: __kasan_slab_free+0x48/0x68 kfree+0x138/0x418 dsa_register_switch+0x2694/0x2ae0 mv88e6xxx_register_switch+0x1b8/0x2a8 mv88e6xxx_probe+0xc4c/0xf60 mdio_probe+0x78/0xb8 really_probe+0x2b8/0x5a8 __driver_probe_device+0x164/0x298 driver_probe_device+0x78/0x258 __device_attach_driver+0x274/0x350 The simplest way to fix the bug is to delete the routing table in its entirety. dsa_tree_setup_routing_table() has no problem in regenerating it even if we deleted links between ports other than those of switch N, because dsa_link_touch() first checks whether the port pair already exists in dst->rtable, allocating if not. The deletion of the routing table in its entirety already exists in dsa_tree_teardown(), so refactor that into a function that can also be called from the tree setup error path. In my analysis of the commit to blame, it is the one which added dsa_link elements to dst->rtable. Prior to that, each switch had its own ds->rtable which is freed when the switch fails to probe. But the tree is potentially persistent memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37786"> read more </a> </article> <hr> <article> <h3> CVE-2025-37787 - Linux Kernel - DSA MV88E6XXX Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37787 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver: https://lore.kernel.org/netdev/Z_lRkMlTJ1KQ0kVX@shell.armlinux.org.uk/ The crash seems to be in devlink_region_destroy(), which is not NULL tolerant but is given a NULL devlink global region pointer. At least on some chips, some devlink regions are conditionally registered since the blamed commit, see mv88e6xxx_setup_devlink_regions_global(): if (cond && !cond(chip)) continue; These are MV88E6XXX_REGION_STU and MV88E6XXX_REGION_PVT. If the chip does not have an STU or PVT, it should crash like this. To fix the issue, avoid unregistering those regions which are NULL, i.e. were skipped at mv88e6xxx_setup_devlink_regions_global() time. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37787"> read more </a> </article> <hr> <article> <h3> CVE-2025-37788 - "CXGB4 Memory Leak Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37788 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path In the for loop used to allocate the loc_array and bmap for each port, a memory leak is possible when the allocation for loc_array succeeds, but the allocation for bmap fails. This is because when the control flow goes to the label free_eth_finfo, only the allocations starting from (i-1)th iteration are freed. Fix that by freeing the loc_array in the bmap allocation error path. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37788"> read more </a> </article> <hr> <article> <h3> CVE-2025-37789 - OpenvSwitch Netlink Attribute Length Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37789 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37789"> read more </a> </article> <hr> <article> <h3> CVE-2025-37790 - "Linux Net MCTP Socket RCU Free Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37790 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCK_RCU_FREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37790"> read more </a> </article> <hr> <article> <h3> CVE-2025-37791 - Dell PowerEdge ethtool Stack Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37791 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() rpl is passed as a pointer to ethtool_cmis_module_poll(), so the correct size of rpl is sizeof(*rpl) which should be just 1 byte. Using the pointer size instead can cause stack corruption: Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ethtool_cmis_wait_for_cond+0xf4/0x100 CPU: 72 UID: 0 PID: 4440 Comm: kworker/72:2 Kdump: loaded Tainted: G OE 6.11.0 #24 Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: Dell Inc. PowerEdge R760/04GWWM, BIOS 1.6.6 09/20/2023 Workqueue: events module_flash_fw_work Call Trace: <TASK> panic+0x339/0x360 ? ethtool_cmis_wait_for_cond+0xf4/0x100 ? __pfx_status_success+0x10/0x10 ? __pfx_status_fail+0x10/0x10 __stack_chk_fail+0x10/0x10 ethtool_cmis_wait_for_cond+0xf4/0x100 ethtool_cmis_cdb_execute_cmd+0x1fc/0x330 ? __pfx_status_fail+0x10/0x10 cmis_cdb_module_features_get+0x6d/0xd0 ethtool_cmis_cdb_init+0x8a/0xd0 ethtool_cmis_fw_update+0x46/0x1d0 module_flash_fw_work+0x17/0xa0 process_one_work+0x179/0x390 worker_thread+0x239/0x340 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37791"> read more </a> </article> <hr> <article> <h3> CVE-2025-37792 - Linux Bluetooth btrtl NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37792 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks that rtl_load_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch: drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR' <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37792"> read more </a> </article> <hr> <article> <h3> CVE-2025-37793 - Intel ASoC avs Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37793 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37793"> read more </a> </article> <hr> <article> <h3> CVE-2025-37794 - "Qualcomm Atheros Linux Wi-Fi Driver NULL Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37794 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Purge vif txq in ieee80211_do_stop() After ieee80211_do_stop() SKB from vif's txq could still be processed. Indeed another concurrent vif schedule_and_wake_txq call could cause those packets to be dequeued (see ieee80211_handle_wake_tx_queue()) without checking the sdata current state. Because vif.drv_priv is now cleared in this function, this could lead to driver crash. For example in ath12k, ahvif is store in vif.drv_priv. Thus if ath12k_mac_op_tx() is called after ieee80211_do_stop(), ahvif->ah can be NULL, leading the ath12k_warn(ahvif->ah,...) call in this function to trigger the NULL deref below. Unable to handle kernel paging request at virtual address dfffffc000000001 KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] batman_adv: bat0: Interface deactivated: brbh1337 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [dfffffc000000001] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] SMP CPU: 1 UID: 0 PID: 978 Comm: lbd Not tainted 6.13.0-g633f875b8f1e #114 Hardware name: HW (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ath12k_mac_op_tx+0x6cc/0x29b8 [ath12k] lr : ath12k_mac_op_tx+0x174/0x29b8 [ath12k] sp : ffffffc086ace450 x29: ffffffc086ace450 x28: 0000000000000000 x27: 1ffffff810d59ca4 x26: ffffff801d05f7c0 x25: 0000000000000000 x24: 000000004000001e x23: ffffff8009ce4926 x22: ffffff801f9c0800 x21: ffffff801d05f7f0 x20: ffffff8034a19f40 x19: 0000000000000000 x18: ffffff801f9c0958 x17: ffffff800bc0a504 x16: dfffffc000000000 x15: ffffffc086ace4f8 x14: ffffff801d05f83c x13: 0000000000000000 x12: ffffffb003a0bf03 x11: 0000000000000000 x10: ffffffb003a0bf02 x9 : ffffff8034a19f40 x8 : ffffff801d05f818 x7 : 1ffffff0069433dc x6 : ffffff8034a19ee0 x5 : ffffff801d05f7f0 x4 : 0000000000000000 x3 : 0000000000000001 x2 : 0000000000000000 x1 : dfffffc000000000 x0 : 0000000000000008 Call trace: ath12k_mac_op_tx+0x6cc/0x29b8 [ath12k] (P) ieee80211_handle_wake_tx_queue+0x16c/0x260 ieee80211_queue_skb+0xeec/0x1d20 ieee80211_tx+0x200/0x2c8 ieee80211_xmit+0x22c/0x338 __ieee80211_subif_start_xmit+0x7e8/0xc60 ieee80211_subif_start_xmit+0xc4/0xee0 __ieee80211_subif_start_xmit_8023.isra.0+0x854/0x17a0 ieee80211_subif_start_xmit_8023+0x124/0x488 dev_hard_start_xmit+0x160/0x5a8 __dev_queue_xmit+0x6f8/0x3120 br_dev_queue_push_xmit+0x120/0x4a8 __br_forward+0xe4/0x2b0 deliver_clone+0x5c/0xd0 br_flood+0x398/0x580 br_dev_xmit+0x454/0x9f8 dev_hard_start_xmit+0x160/0x5a8 __dev_queue_xmit+0x6f8/0x3120 ip6_finish_output2+0xc28/0x1b60 __ip6_finish_output+0x38c/0x638 ip6_output+0x1b4/0x338 ip6_local_out+0x7c/0xa8 ip6_send_skb+0x7c/0x1b0 ip6_push_pending_frames+0x94/0xd0 rawv6_sendmsg+0x1a98/0x2898 inet_sendmsg+0x94/0xe0 __sys_sendto+0x1e4/0x308 __arm64_sys_sendto+0xc4/0x140 do_el0_svc+0x110/0x280 el0_svc+0x20/0x60 el0t_64_sync_handler+0x104/0x138 el0t_64_sync+0x154/0x158 To avoid that, empty vif's txq at ieee80211_do_stop() so no packet could be dequeued after ieee80211_do_stop() (new packets cannot be queued because SDATA_STATE_RUNNING is cleared at this point). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37794"> read more </a> </article> <hr> <article> <h3> CVE-2025-37795 - Linux Kernel wifi ath11k Use After Free </h3> <p> <strong>CVE ID : </strong>CVE-2025-37795 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() The ieee80211 skb control block key (set when skb was queued) could have been removed before ieee80211_tx_dequeue() call. ieee80211_tx_dequeue() already called ieee80211_tx_h_select_key() to get the current key, but the latter do not update the key in skb control block in case it is NULL. Because some drivers actually use this key in their TX callbacks (e.g. ath1{1,2}k_mac_op_tx()) this could lead to the use after free below: BUG: KASAN: slab-use-after-free in ath11k_mac_op_tx+0x590/0x61c Read of size 4 at addr ffffff803083c248 by task kworker/u16:4/1440 CPU: 3 UID: 0 PID: 1440 Comm: kworker/u16:4 Not tainted 6.13.0-ge128f627f404 #2 Hardware name: HW (DT) Workqueue: bat_events batadv_send_outstanding_bcast_packet Call trace: show_stack+0x14/0x1c (C) dump_stack_lvl+0x58/0x74 print_report+0x164/0x4c0 kasan_report+0xac/0xe8 __asan_report_load4_noabort+0x1c/0x24 ath11k_mac_op_tx+0x590/0x61c ieee80211_handle_wake_tx_queue+0x12c/0x1c8 ieee80211_queue_skb+0xdcc/0x1b4c ieee80211_tx+0x1ec/0x2bc ieee80211_xmit+0x224/0x324 __ieee80211_subif_start_xmit+0x85c/0xcf8 ieee80211_subif_start_xmit+0xc0/0xec4 dev_hard_start_xmit+0xf4/0x28c __dev_queue_xmit+0x6ac/0x318c batadv_send_skb_packet+0x38c/0x4b0 batadv_send_outstanding_bcast_packet+0x110/0x328 process_one_work+0x578/0xc10 worker_thread+0x4bc/0xc7c kthread+0x2f8/0x380 ret_from_fork+0x10/0x20 Allocated by task 1906: kasan_save_stack+0x28/0x4c kasan_save_track+0x1c/0x40 kasan_save_alloc_info+0x3c/0x4c __kasan_kmalloc+0xac/0xb0 __kmalloc_noprof+0x1b4/0x380 ieee80211_key_alloc+0x3c/0xb64 ieee80211_add_key+0x1b4/0x71c nl80211_new_key+0x2b4/0x5d8 genl_family_rcv_msg_doit+0x198/0x240 <...> Freed by task 1494: kasan_save_stack+0x28/0x4c kasan_save_track+0x1c/0x40 kasan_save_free_info+0x48/0x94 __kasan_slab_free+0x48/0x60 kfree+0xc8/0x31c kfree_sensitive+0x70/0x80 ieee80211_key_free_common+0x10c/0x174 ieee80211_free_keys+0x188/0x46c ieee80211_stop_mesh+0x70/0x2cc ieee80211_leave_mesh+0x1c/0x60 cfg80211_leave_mesh+0xe0/0x280 cfg80211_leave+0x1e0/0x244 <...> Reset SKB control block key before calling ieee80211_tx_h_select_key() to avoid that. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37795"> read more </a> </article> <hr> <article> <h3> CVE-2025-37796 - "Linux Kernel WiFi at76c50x Use After Free" </h3> <p> <strong>CVE ID : </strong>CVE-2025-37796 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37796"> read more </a> </article> <hr> <article> <h3> CVE-2025-44835 - D-Link DIR-816 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44835 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44835"> read more </a> </article> <hr> <article> <h3> CVE-2025-44854 - Totolink CP900 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44854 <br> <strong>Published : </strong> May 1, 2025, 2:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>Totolink CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44854"> read more </a> </article> <hr> <article> <h3> CVE-2025-1529 - WordPress AM LottiePlayer Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1529 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1529"> read more </a> </article> <hr> <article> <h3> CVE-2025-3874 - WordPress Simple Shopping Cart Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-3874 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to lack of randomization of a user controlled key. This makes it possible for unauthenticated attackers to access customer shopping carts and edit product links, add or delete products, and discover coupon codes. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3874"> read more </a> </article> <hr> <article> <h3> CVE-2025-3889 - WordPress Simple Shopping Cart Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-3889 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'process_payment_data' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the quantity of a product to a negative number, which subtracts the product cost from the total order cost. The attack will only work with Manual Checkout mode, as PayPal and Stripe will not process payments for a negative quantity. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3889"> read more </a> </article> <hr> <article> <h3> CVE-2025-3890 - WordPress Simple Shopping Cart Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3890 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' shortcode in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3890"> read more </a> </article> <hr> <article> <h3> CVE-2025-4163 - PHPGurukul Land Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4163 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4163"> read more </a> </article> <hr> <article> <h3> CVE-2025-4164 - PHPGurukul Employee Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4164 <br> <strong>Published : </strong> May 1, 2025, 12:15 p.m. | 21 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4164"> read more </a> </article> <hr> <article> <h3> CVE-2025-27007 - Brainstorm Force SureTriggers Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27007 <br> <strong>Published : </strong> May 1, 2025, 11:15 a.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers: from n/a through 1.0.82. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27007"> read more </a> </article> <hr> <article> <h3> CVE-2025-4161 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4161 <br> <strong>Published : </strong> May 1, 2025, 11:15 a.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PCMan FTP Server up to 2.0.7. This affects an unknown part of the component VERBOSE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4161"> read more </a> </article> <hr> <article> <h3> CVE-2025-4162 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4162 <br> <strong>Published : </strong> May 1, 2025, 11:15 a.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PCMan FTP Server up to 2.0.7. This vulnerability affects unknown code of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4162"> read more </a> </article> <hr> <article> <h3> CVE-2025-4159 - PCMan FTP Server GLOB Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4159 <br> <strong>Published : </strong> May 1, 2025, 10:15 a.m. | 2 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component GLOB Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4159"> read more </a> </article> <hr> <article> <h3> CVE-2025-4160 - PCMan FTP Server LS Command Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4160 <br> <strong>Published : </strong> May 1, 2025, 10:15 a.m. | 2 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LS Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4160"> read more </a> </article> <hr> <article> <h3> CVE-2025-4157 - PHPGurukul Boat Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4157 <br> <strong>Published : </strong> May 1, 2025, 9:15 a.m. | 3 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/booking-details.php. The manipulation of the argument Status leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4157"> read more </a> </article> <hr> <article> <h3> CVE-2025-4158 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4158 <br> <strong>Published : </strong> May 1, 2025, 9:15 a.m. | 3 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been classified as critical. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4158"> read more </a> </article> <hr> <article> <h3> CVE-2025-47154 - Ladybird LibJS Use-After-Free Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-47154 <br> <strong>Published : </strong> May 1, 2025, 8:15 a.m. | 4 hours, 21 minutes ago <br> <strong>Description : </strong>LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for use by developers." <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47154"> read more </a> </article> <hr> <article> <h3> CVE-2025-4155 - PHPGurukul Boat Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4155 <br> <strong>Published : </strong> May 1, 2025, 8:15 a.m. | 4 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/edit-boat.php. The manipulation of the argument bid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4155"> read more </a> </article> <hr> <article> <h3> CVE-2025-4156 - PHPGurukul Boat Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4156 <br> <strong>Published : </strong> May 1, 2025, 8:15 a.m. | 4 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-image.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4156"> read more </a> </article> <hr> <article> <h3> CVE-2025-3521 - "WordPress Team Members Stored Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3521 <br> <strong>Published : </strong> May 1, 2025, 7:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3521"> read more </a> </article> <hr> <article> <h3> CVE-2025-47153 - "Nodejs libuv Out-of-Bounds Access Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-47153 <br> <strong>Published : </strong> May 1, 2025, 7:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_20.19.0+dfsg-1_i386.deb for Debian GNU/Linux, have an inconsistent off_t size (e.g., building on i386 Debian always uses _FILE_OFFSET_BITS=64 for the libuv dynamic library, but uses the _FILE_OFFSET_BITS global system default of 32 for nodejs), leading to out-of-bounds access. NOTE: this is not a problem in the Node.js software itself. In particular, the Node.js website's download page does not offer prebuilt Node.js for Linux on i386. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-47153"> read more </a> </article> <hr> <article> <h3> CVE-2025-4100 - Nautic Pages WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-4100 <br> <strong>Published : </strong> May 1, 2025, 7:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'np_marinetraffic_map' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4100"> read more </a> </article> <hr> <article> <h3> CVE-2025-4153 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4153 <br> <strong>Published : </strong> May 1, 2025, 7:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4153"> read more </a> </article> <hr> <article> <h3> CVE-2025-4154 - PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4154 <br> <strong>Published : </strong> May 1, 2025, 7:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this issue is some unknown functionality of the file /admin/enrollment-details.php. The manipulation of the argument Status leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4154"> read more </a> </article> <hr> <article> <h3> CVE-2025-3503 - "WP Maps Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3503 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 6 hours, 21 minutes ago <br> <strong>Description : </strong>The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3503"> read more </a> </article> <hr> <article> <h3> CVE-2025-3504 - WP Maps Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3504 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 6 hours, 21 minutes ago <br> <strong>Description : </strong>The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3504"> read more </a> </article> <hr> <article> <h3> CVE-2025-4151 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4151 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 6 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4151"> read more </a> </article> <hr> <article> <h3> CVE-2025-4152 - PHPGurukul Online Birth Certificate System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4152 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 6 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4152"> read more </a> </article> <hr> <article> <h3> CVE-2024-13381 - WordPress Calculated Fields Form Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13381 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13381"> read more </a> </article> <hr> <article> <h3> CVE-2025-3502 - WP Maps Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3502 <br> <strong>Published : </strong> May 1, 2025, 6:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3502"> read more </a> </article> <hr> <article> <h3> CVE-2024-13845 - WordPress Gravity Forms WebHooks SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2024-13845 <br> <strong>Published : </strong> May 1, 2025, 5:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13845"> read more </a> </article> <hr> <article> <h3> CVE-2025-3952 - Projectopia WordPress Project Management Unauthenticated Option Deletion </h3> <p> <strong>CVE ID : </strong>CVE-2025-3952 <br> <strong>Published : </strong> May 1, 2025, 5:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' function in all versions up to, and including, 5.1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3952"> read more </a> </article> <hr> <article> <h3> CVE-2025-4099 - WordPress List Children Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4099 <br> <strong>Published : </strong> May 1, 2025, 5:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'list_children' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4099"> read more </a> </article> <hr> <article> <h3> CVE-2025-4150 - Netgear EX6200 Remote Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4150 <br> <strong>Published : </strong> May 1, 2025, 5:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub_54340. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4150"> read more </a> </article> <hr> <article> <h3> CVE-2025-2168 - Elementor Store Kit CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2168 <br> <strong>Published : </strong> May 1, 2025, 4:16 a.m. | 6 hours, 32 minutes ago <br> <strong>Description : </strong>The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect nonce validation on the dismiss() function. This makes it possible for unauthenticated attackers to set arbitrary user meta values to `1` which can be leveraged to lock and administrator out of their site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2168"> read more </a> </article> <hr> <article> <h3> CVE-2025-4148 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4148 <br> <strong>Published : </strong> May 1, 2025, 4:16 a.m. | 6 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub_503FC. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4148"> read more </a> </article> <hr> <article> <h3> CVE-2025-4149 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4149 <br> <strong>Published : </strong> May 1, 2025, 4:16 a.m. | 6 hours, 32 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub_54014. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4149"> read more </a> </article> <hr> <article> <h3> CVE-2025-1304 - NewsBlogger for WordPress Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1304 <br> <strong>Published : </strong> May 1, 2025, 4:16 a.m. | 4 hours, 20 minutes ago <br> <strong>Description : </strong>The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin() function in all versions up to, and including, 0.2.5.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1304"> read more </a> </article> <hr> <article> <h3> CVE-2025-1305 - NewsBlogger WordPress CSRF Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1305 <br> <strong>Published : </strong> May 1, 2025, 4:16 a.m. | 4 hours, 20 minutes ago <br> <strong>Description : </strong>The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing or incorrect nonce validation on the newsblogger_install_and_activate_plugin() function. This makes it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 04:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1305"> read more </a> </article> <hr> <article> <h3> CVE-2025-2816 - WordPress Page View Count Unauthorized Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2816 <br> <strong>Published : </strong> May 1, 2025, 3:15 a.m. | 5 hours, 21 minutes ago <br> <strong>Description : </strong>The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to one on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2816"> read more </a> </article> <hr> <article> <h3> CVE-2025-4147 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4147 <br> <strong>Published : </strong> May 1, 2025, 2:15 a.m. | 6 hours, 21 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub_47F7C. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4147"> read more </a> </article> <hr> <article> <h3> CVE-2025-4146 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4146 <br> <strong>Published : </strong> May 1, 2025, 2:15 a.m. | 4 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. Affected is the function sub_41940. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4146"> read more </a> </article> <hr> <article> <h3> CVE-2025-4143 - Cloudflare Workers-OAuth-Provider OAuth Redirect URI Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4143 <br> <strong>Published : </strong> May 1, 2025, 1:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on the allowed list of redirect URIs for the given client registration. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/26 https://github.com/cloudflare/workers-oauth-provider/pull/26 Impact: Under certain circumstances (see below), if a victim had previously authorized with a server built on workers-oath-provider, and an attacker could later trick the victim into visiting a malicious web site, then attacker could potentially steal the victim's credentials to the same OAuth server and subsequently impersonate them. In order for the attack to be possible, the OAuth server's authorized callback must be designed to auto-approve authorizations that appear to come from an OAuth client that the victim has authorized previously. The authorization flow is not implemented by workers-oauth-provider; it is up to the application built on top to decide whether to implement such automatic re-authorization. However, many applications do implement such logic. Note: It is a basic, well-known requirement that OAuth servers should verify that the redirect URI is among the allowed list for the client, both during the authorization flow and subsequently when exchanging the authorization code for an access token. workers-oauth-provider implemented only the latter check, not the former. Unfortunately, the former is the much more important check. Readers who are familiar with OAuth may recognize that failing to check redirect URIs against the allowed list is a well-known, basic mistake, covered extensively in the RFC and elsewhere. The author of this library would like everyone to know that he was, in fact, well-aware of this requirement, thought about it a lot while designing the library, and then, somehow, forgot to actually make sure the check was in the code. That is, it's not that he didn't know what he was doing, it's that he knew what he was doing but flubbed it. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4143"> read more </a> </article> <hr> <article> <h3> CVE-2025-4144 - Cloudflare Workers-Oauth-Provider PKCE Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4144 <br> <strong>Published : </strong> May 1, 2025, 1:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27 https://github.com/cloudflare/workers-oauth-provider/pull/27 Impact: PKCE is a defense-in-depth mechanism against certain kinds of attacks and was an optional extension in OAuth 2.0 which became required in the OAuth 2.1 draft. (Note that the MCP specification requires OAuth 2.1.). This bug completely bypasses PKCE protection. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4144"> read more </a> </article> <hr> <article> <h3> CVE-2025-4145 - Netgear EX6200 Remote Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4145 <br> <strong>Published : </strong> May 1, 2025, 1:15 a.m. | 5 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94. This issue affects the function sub_3D0BC. The manipulation of the argument host leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 01 May 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4145"> read more </a> </article> <hr> <article> <h3> CVE-2025-4142 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4142 <br> <strong>Published : </strong> April 30, 2025, 11:16 p.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. This vulnerability affects the function sub_3C8EC. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 23:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4142"> read more </a> </article> <hr> <article> <h3> CVE-2024-30146 - HCL Domino Leap Unauthenticated Server-Side File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2024-30146 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 8 hours, 33 minutes ago <br> <strong>Description : </strong>Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem. <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30146"> read more </a> </article> <hr> <article> <h3> CVE-2025-4140 - Netgear EX6120 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4140 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 8 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. Affected by this issue is the function sub_30394. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4140"> read more </a> </article> <hr> <article> <h3> CVE-2025-4141 - Netgear EX6200 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4141 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 8 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. This affects the function sub_3C03C. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4141"> read more </a> </article> <hr> <article> <h3> CVE-2022-42450 - HCL Domino Volt SVG Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-42450 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-42450"> read more </a> </article> <hr> <article> <h3> CVE-2023-37517 - HCL Leap Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2023-37517 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Missing "no cache" headers in HCL Leap permits sensitive data to be cached. <br> <strong>Severity:</strong> 3.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-37517"> read more </a> </article> <hr> <article> <h3> CVE-2023-37535 - HCL Domino Volt and Domino Leap Unvalidated Request Parameter Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-37535 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-37535"> read more </a> </article> <hr> <article> <h3> CVE-2023-45721 - HCL Leap Unauthenticated Directory Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2023-45721 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Insufficient default configuration in HCL Leap allows anonymous access to directory information. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-45721"> read more </a> </article> <hr> <article> <h3> CVE-2023-4533 - Red Hat OpenShift Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2023-4533 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. It was assigned as a duplicate of CVE-2023-52440 <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-4533"> read more </a> </article> <hr> <article> <h3> CVE-2024-30115 - HCL Leap Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-30115 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30115"> read more </a> </article> <hr> <article> <h3> CVE-2024-30145 - IBM HCL Domino Volt and Domino Leap Client-Side Script Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-30145 <br> <strong>Published : </strong> April 30, 2025, 10:15 p.m. | 6 hours, 33 minutes ago <br> <strong>Description : </strong>Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30145"> read more </a> </article> <hr> <article> <h3> CVE-2025-24132 - Apple AirPlay Local Network Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-24132 <br> <strong>Published : </strong> April 30, 2025, 9:15 p.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24132"> read more </a> </article> <hr> <article> <h3> CVE-2025-30422 - AirPlay Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30422 <br> <strong>Published : </strong> April 30, 2025, 9:15 p.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30422"> read more </a> </article> <hr> <article> <h3> CVE-2025-4139 - Netgear EX6120 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4139 <br> <strong>Published : </strong> April 30, 2025, 9:15 p.m. | 7 hours, 33 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the function fwAcosCgiInbound. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4139"> read more </a> </article> <hr> <article> <h3> CVE-2022-27562 - HCL Domino Volt HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-27562 <br> <strong>Published : </strong> April 30, 2025, 9:15 p.m. | 5 hours, 19 minutes ago <br> <strong>Description : </strong>Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-27562"> read more </a> </article> <hr> <article> <h3> CVE-2022-42449 - HCL Domino Volt HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-42449 <br> <strong>Published : </strong> April 30, 2025, 9:15 p.m. | 5 hours, 19 minutes ago <br> <strong>Description : </strong>Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-42449"> read more </a> </article> <hr> <article> <h3> CVE-2024-6032 - Tesla Model S Iris Modem Command Injection Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-6032 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target system in order to exploit this vulnerability. The specific flaw exists within the ql_atfwd process. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code on the target modem in the context of root. Was ZDI-CAN-23201. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6032"> read more </a> </article> <hr> <article> <h3> CVE-2025-27611 - Base-x Unvalidated User Input Address Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27611 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27611"> read more </a> </article> <hr> <article> <h3> CVE-2025-2082 - Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2082 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VCSEC module. By manipulating the certificate response sent from the Tire Pressure Monitoring System (TPMS), an attacker can trigger an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the VCSEC module and send arbitrary messages to the vehicle CAN bus. Was ZDI-CAN-23800. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2082"> read more </a> </article> <hr> <article> <h3> CVE-2025-4136 - Weitong Mall Remote Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4136 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Weitong Mall 1.0.0. It has been classified as critical. This affects an unknown part of the component Sale Endpoint. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4136"> read more </a> </article> <hr> <article> <h3> CVE-2024-13943 - Tesla Model S Iris Modem Sandbox Escape Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13943 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the QCMAP_ConnectionManager component. An attacker can abuse the service to assign LAN addresses to the WWAN. An attacker can leverage this vulnerability to access network services that were only intended to be exposed to the internal LAN. Was ZDI-CAN-23199. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13943"> read more </a> </article> <hr> <article> <h3> CVE-2024-6029 - Tesla Model S Iris Modem Firewall Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-6029 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass the firewall on the Iris modem in affected Tesla Model S vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall service. The issue results from a failure to obtain the xtables lock. An attacker can leverage this vulnerability to bypass firewall rules. Was ZDI-CAN-23197. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6029"> read more </a> </article> <hr> <article> <h3> CVE-2024-6030 - Tesla Model S oFono Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-6030 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this vulnerability. The specific flaw exists within the oFono process. The process allows an attacker to modify interfaces. An attacker can leverage this vulnerability to bypass the iptables network sandbox. Was ZDI-CAN-23200. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6030"> read more </a> </article> <hr> <article> <h3> CVE-2024-6031 - Tesla Model S oFono AT Command Heap Buffer Overflow Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-6031 <br> <strong>Published : </strong> April 30, 2025, 8:15 p.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-23198. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-6031"> read more </a> </article> <hr> <article> <h3> CVE-2025-46558 - XWiki Contrib Markdown XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-46558 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 5 hours, 19 minutes ago <br> <strong>Description : </strong>XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting (XSS) through HTML. In particular, using Markdown syntax, it's possible for any user to embed Javascript code that will then be executed on the browser of any other user visiting either the document or the comment that contains it. In the instance that this code is executed by a user with admins or programming rights, this issue compromises the confidentiality, integrity and availability of the whole XWiki installation. This issue has been patched in version 8.9. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46558"> read more </a> </article> <hr> <article> <h3> CVE-2024-47784 - ANC Software Password Change Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-47784 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47784"> read more </a> </article> <hr> <article> <h3> CVE-2024-9876 - ABB ANC/ANC-L/ANC-mini Data Tampering Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9876 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>: Modification of Assumed-Immutable Data (MAID) vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9876"> read more </a> </article> <hr> <article> <h3> CVE-2024-9877 - ABB ANC, ANC-L, ANC-mini GET Request Method With Sensitive Query Strings Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-9877 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9877"> read more </a> </article> <hr> <article> <h3> CVE-2025-24887 - OpenCTI Allow/Deny List Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24887 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are intended to be unmodifiable by the user. It is possible to toggle the `external` flag on/off and change the own token value for a user. It is also possible to edit attributes that are not in the allow list, such as `otp_qr` and `otp_activated`. If external users exist in the OpenCTI setup and the information about these users identities is sensitive, the above vulnerabilities can be used to enumerate existing user accounts as a standard low privileged user. This issue has been patched in version 6.4.10. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24887"> read more </a> </article> <hr> <article> <h3> CVE-2025-2170 - SMA1000 Appliance SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2170 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2170"> read more </a> </article> <hr> <article> <h3> CVE-2025-32777 - Kubernetes Volcano Denial of Service and Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-32777 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege escalation, because Volcano users may run their Elastic service and extender plugins in separate pods or nodes from the scheduler. In the Kubernetes security model, node isolation is a security boundary, and as such an attacker is able to cross that boundary in Volcano's case if they have compromised either the vulnerable services or the pod/node in which they are deployed. The scheduler will become unavailable to other users and workloads in the cluster. The scheduler will either crash with an unrecoverable OOM panic or freeze while consuming excessive amounts of memory. This issue has been patched in versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32777"> read more </a> </article> <hr> <article> <h3> CVE-2025-46331 - OpenFGA Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46331 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.10 to v1.3.6 (Helm chart <= openfga-0.2.28, docker <= v.1.8.10) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. This issue has been patched in version 1.8.11. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46331"> read more </a> </article> <hr> <article> <h3> CVE-2025-46554 - XWiki Unauthenticated Attachment Metadata Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46554 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint. There is no filtering for the results depending on current user rights, meaning an unauthenticated user could exploit this even in a private wiki. This issue has been patched in versions 14.10.22, 15.10.12, 16.4.3, and 16.7.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46554"> read more </a> </article> <hr> <article> <h3> CVE-2025-46557 - XWiki Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46557 <br> <strong>Published : </strong> April 30, 2025, 7:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to before 16.10.0-rc-1, a user who can access pages located in the XWiki space (by default, anyone) can access the page XWiki.Authentication.Administration and (unless an authenticator is set in xwiki.cfg) switch to another installed authenticator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authenticator extension was installed, it's not really possible to do anything for an attacker. Also, in most cases, if an SSO authenticator is installed and utilized (like OIDC or LDAP for example), the worst an attacker can do is break authentication by switching back to the standard authenticator (that's because it's impossible to login to a user which does not have a stored password, and that's usually what SSO authenticator produce). This issue has been patched in versions 15.10.14, 16.4.6, and 16.10.0-rc-1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46557"> read more </a> </article> <hr> <article> <h3> CVE-2025-39413 - David Gwyer Simple Sitemap Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39413 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in David Gwyer Simple Sitemap – Create a Responsive HTML Sitemap.This issue affects Simple Sitemap – Create a Responsive HTML Sitemap: from n/a through 3.5.14. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39413"> read more </a> </article> <hr> <article> <h3> CVE-2025-3269 - Red Hat Linux Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-3269 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3269"> read more </a> </article> <hr> <article> <h3> CVE-2025-44192 - SourceCodester Simple Barangay Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44192 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_clearance. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44192"> read more </a> </article> <hr> <article> <h3> CVE-2025-44193 - SourceCodester Simple Barangay Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-44193 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_complaint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44193"> read more </a> </article> <hr> <article> <h3> CVE-2025-44194 - SourceCodester Simple Barangay Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-44194 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in /barangay_management/admin/?page=view_household. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-44194"> read more </a> </article> <hr> <article> <h3> CVE-2025-46619 - Couchbase Server File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46619 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46619"> read more </a> </article> <hr> <article> <h3> CVE-2025-4135 - Netgear WG302v2 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4135 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 2 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function ui_get_input_value. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4135"> read more </a> </article> <hr> <article> <h3> CVE-2025-21416 - Azure Virtual Desktop Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21416 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21416"> read more </a> </article> <hr> <article> <h3> CVE-2025-24091 - Apple Notification Service Impersonation and Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24091 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24091"> read more </a> </article> <hr> <article> <h3> CVE-2025-2156 - Red Hat Linux Kernel Uninitialized Memory Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-2156 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2156"> read more </a> </article> <hr> <article> <h3> CVE-2025-30389 - Azure Bot Framework SDK Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30389 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30389"> read more </a> </article> <hr> <article> <h3> CVE-2025-30390 - Azure AzureAD Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-30390 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Improper authorization in Azure allows an authorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30390"> read more </a> </article> <hr> <article> <h3> CVE-2025-30391 - Microsoft Dynamics Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30391 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30391"> read more </a> </article> <hr> <article> <h3> CVE-2025-30392 - Azure Bot Framework SDK Privilege Escalation Unauthorized Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-30392 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30392"> read more </a> </article> <hr> <article> <h3> CVE-2025-33074 - Microsoft Azure Functions Cryptographic Signature Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-33074 <br> <strong>Published : </strong> April 30, 2025, 6:15 p.m. | 23 minutes ago <br> <strong>Description : </strong>Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-33074"> read more </a> </article> <hr> <article> <h3> CVE-2025-3599 - Symantec Endpoint Protection ERASER Engine Elevation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3599 <br> <strong>Published : </strong> April 30, 2025, 5:15 p.m. | 1 hour, 23 minutes ago <br> <strong>Description : </strong>Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3599"> read more </a> </article> <hr> <article> <h3> CVE-2025-3859 - Focus URL Truncation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3859 <br> <strong>Published : </strong> April 30, 2025, 5:15 p.m. | 1 hour, 23 minutes ago <br> <strong>Description : </strong>Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage This vulnerability affects Focus < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3859"> read more </a> </article> <hr> <article> <h3> CVE-2025-32376 - Discourse DM Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32376 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable version 3.4.3 and beta version 3.5.0.beta3. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32376"> read more </a> </article> <hr> <article> <h3> CVE-2025-32970 - XWiki Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32970 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0, an open redirect vulnerability in the HTML conversion request filter allows attackers to construct URLs on an XWiki instance that redirects to any URL. This issue has been patched in versions 15.10.13, 16.4.4, and 16.8.0. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32970"> read more </a> </article> <hr> <article> <h3> CVE-2025-32971 - XWiki Solr Script Service Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-32971 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into account. The Solr script service that is accessible in XWiki's scripting API normally requires programming rights to be called. Due to using the wrong API for checking rights, it doesn't take the fact into account that programming rights might have been dropped by calling `$xcontext.dropPermissions()`. If some code relies on this for the safety of executing Velocity code with the wrong author context, this could allow a user with script rights to either cause a high load by indexing documents or to temporarily remove documents from the search index. This issue has been patched in versions 15.10.13, 16.4.4, and 16.8.0-rc-1. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32971"> read more </a> </article> <hr> <article> <h3> CVE-2025-32972 - XWiki LESS Compiler Script Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32972 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the script API of the LESS compiler in XWiki is incorrectly checking for rights when calling the cache cleaning API, making it possible to clean the cache without having programming right. The only impact of this is a slowdown in XWiki execution as the caches are re-filled. As this vulnerability requires script right to exploit, and script right already allows unlimited execution of scripts, the additional impact due to this vulnerability is low. This issue has been patched in versions 15.10.12, 16.4.3, and 16.8.0-rc-1. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32972"> read more </a> </article> <hr> <article> <h3> CVE-2025-32973 - XWiki Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32973 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, when a user with programming rights edits a document in XWiki that was last edited by a user without programming rights and contains an XWiki.ComponentClass, there is no warning that this will grant programming rights to this object. An attacker who created such a malicious object could use this to gain programming rights on the wiki. For this, the attacker needs to have edit rights on at least one page to place this object and then get an admin user to edit that document. This issue has been patched in versions 15.10.12, 16.4.3, and 16.8.0-rc-1. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32973"> read more </a> </article> <hr> <article> <h3> CVE-2025-32974 - XWiki Cross-Site Scripting (XSS) and Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32974 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights analysis doesn't consider TextAreas with default content type. When editing a page, XWiki warns since version 15.9 when there is content on the page like a script macro that would gain more rights due to the editing. This analysis doesn't consider certain kinds of properties, allowing a user to put malicious scripts in there that will be executed after a user with script, admin, or programming rights edited the page. Such a malicious script could impact the confidentiality, integrity and availability of the whole XWiki installation. This issue has been patched in versions 15.10.8 and 16.2.0. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32974"> read more </a> </article> <hr> <article> <h3> CVE-2025-46342 - Kyverno Namespace Selector Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46342 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happen that policy rules using namespace selector(s) in their match statements are mistakenly not applied during admission review request processing due to a missing error propagation in function `GetNamespaceSelectorsFromNamespaceLister` in `pkg/utils/engine/labels.go`. As a consequence, security-critical mutations and validations are bypassed, potentially allowing attackers with K8s API access to perform malicious operations. This issue has been patched in versions 1.13.5 and 1.14.0. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46342"> read more </a> </article> <hr> <article> <h3> CVE-2025-4122 - Netgear JWNR2000 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4122 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 23 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the function sub_435E04. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4122"> read more </a> </article> <hr> <article> <h3> CVE-2025-27134 - Joplin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27134 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27134"> read more </a> </article> <hr> <article> <h3> CVE-2025-27409 - Joplin Server Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27409 <br> <strong>Published : </strong> April 30, 2025, 3:16 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, path traversal is possible in Joplin Server if static file path starts with `css/pluginAssets` or `js/pluginAssets`. The `findLocalFile` function in the `default route` calls `localFileFromUrl` to check for special `pluginAssets` paths. If the function returns a path, the result is returned directly, without checking for path traversal. The vulnerability allows attackers to read files outside the intended directories. This issue has been patched in version 3.3.3. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27409"> read more </a> </article> <hr> <article> <h3> CVE-2025-45009 - PHPGurukul Park Ticketing Management System HTML Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45009 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata parameter. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45009"> read more </a> </article> <hr> <article> <h3> CVE-2025-45010 - PHPGurukul Park Ticketing Management System HTML Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45010 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45010"> read more </a> </article> <hr> <article> <h3> CVE-2025-45011 - "PHPGurukul Park Ticketing Management System HTML Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-45011 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45011"> read more </a> </article> <hr> <article> <h3> CVE-2025-45015 - PHPGurukul Park Ticketing Management System Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-45015 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45015"> read more </a> </article> <hr> <article> <h3> CVE-2025-45017 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45017 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45017"> read more </a> </article> <hr> <article> <h3> CVE-2025-45018 - PHPGurukul Park Ticketing Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45018 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45018"> read more </a> </article> <hr> <article> <h3> CVE-2025-45019 - PHPGurukul Park Ticketing Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45019 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45019"> read more </a> </article> <hr> <article> <h3> CVE-2025-45021 - PHPGurukul Directory Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45021 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45021"> read more </a> </article> <hr> <article> <h3> CVE-2025-4118 - Weitong Mall Product History Handler Improper Access Controls Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4118 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Weitong Mall 1.0.0. This affects an unknown part of the file /historyList of the component Product History Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4118"> read more </a> </article> <hr> <article> <h3> CVE-2025-4119 - Weitong Mall Product Statistics Handler Improper Access Controls </h3> <p> <strong>CVE ID : </strong>CVE-2025-4119 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4119"> read more </a> </article> <hr> <article> <h3> CVE-2025-4120 - Netgear JWNR2000 Remote Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4120 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4120"> read more </a> </article> <hr> <article> <h3> CVE-2025-4121 - Netgear JWNR2000v2 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4121 <br> <strong>Published : </strong> April 30, 2025, 2:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been declared as critical. Affected by this vulnerability is the function cmd_wireless. The manipulation of the argument host leads to command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4121"> read more </a> </article> <hr> <article> <h3> CVE-2025-4117 - Netgear JWNR2000 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4117 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4117"> read more </a> </article> <hr> <article> <h3> CVE-2025-4115 - Netgear JWNR2000v2 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4115 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vulnerability is the function default_version_is_new. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4115"> read more </a> </article> <hr> <article> <h3> CVE-2025-4116 - Netgear JWNR2000 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4116 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function get_cur_lang_ver. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4116"> read more </a> </article> <hr> <article> <h3> CVE-2025-3394 - ABB Automation Builder Improper Privilege Management </h3> <p> <strong>CVE ID : </strong>CVE-2025-3394 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3394"> read more </a> </article> <hr> <article> <h3> CVE-2025-3395 - ABB Automation Builder Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information </h3> <p> <strong>CVE ID : </strong>CVE-2025-3395 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3395"> read more </a> </article> <hr> <article> <h3> CVE-2025-45007 - PHPGurukul Timetable Generator System Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-45007 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45007"> read more </a> </article> <hr> <article> <h3> CVE-2025-45020 - PHPGurukul Park Ticketing Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45020 <br> <strong>Published : </strong> April 30, 2025, 1:15 p.m. | 1 hour, 18 minutes ago <br> <strong>Description : </strong>A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45020"> read more </a> </article> <hr> <article> <h3> CVE-2025-24348 - CtrlX OS Network Interfaces HTTP Request Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24348 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configuration file via a crafted HTTP request. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24348"> read more </a> </article> <hr> <article> <h3> CVE-2025-24349 - CtrlX OS Network Interfaces HTTP Request Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24349 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network interfaces via a crafted HTTP request. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24349"> read more </a> </article> <hr> <article> <h3> CVE-2025-24350 - CtrlX OS Certificates and Keys Arbitrary File Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24350 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP request. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24350"> read more </a> </article> <hr> <article> <h3> CVE-2025-24351 - CtrlX OS Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24351 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24351"> read more </a> </article> <hr> <article> <h3> CVE-2025-27532 - "ctrlX OS Web Application Backup Restore Authentication Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-27532 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via multiple crafted HTTP requests. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27532"> read more </a> </article> <hr> <article> <h3> CVE-2025-4114 - Netgear JWNR2000 Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4114 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 2 hours, 18 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function check_language_file. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4114"> read more </a> </article> <hr> <article> <h3> CVE-2025-24341 - CtrlX OS HTTP Request Flood Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24341 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (DoS) condition on the device via multiple crafted HTTP requests. In the worst case, a full power cycle is needed to regain control of the device. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24341"> read more </a> </article> <hr> <article> <h3> CVE-2025-24342 - CtrlX OS Username Guessing Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24342 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24342"> read more </a> </article> <hr> <article> <h3> CVE-2025-24343 - CtrlX OS File Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24343 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary files in arbitrary file system paths via a crafted HTTP request. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24343"> read more </a> </article> <hr> <article> <h3> CVE-2025-24344 - CtrlX OS Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-24344 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute arbitrary client-side code in the context of another user's browser via a crafted HTTP request. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24344"> read more </a> </article> <hr> <article> <h3> CVE-2025-24345 - CtrlX OS Hosts File Manipulation Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24345 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24345"> read more </a> </article> <hr> <article> <h3> CVE-2025-24346 - CtrlX OS Proxy Environment Variable Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24346 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP request. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24346"> read more </a> </article> <hr> <article> <h3> CVE-2025-24347 - CtrlX OS Network Interfaces HTTP Request Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24347 <br> <strong>Published : </strong> April 30, 2025, 12:15 p.m. | 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network configuration file via a crafted HTTP request. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24347"> read more </a> </article> <hr> <article> <h3> CVE-2025-24338 - CtrlX OS Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-24338 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24338"> read more </a> </article> <hr> <article> <h3> CVE-2025-24339 - CtrlX OS HTTP Request Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24339 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache poisoning or Man-in-the-Middle (MitM), via a crafted HTTP request. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24339"> read more </a> </article> <hr> <article> <h3> CVE-2025-24340 - CtrlX OS Password Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24340 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext passwords of other users. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24340"> read more </a> </article> <hr> <article> <h3> CVE-2025-4110 - PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4110 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-teacher.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4110"> read more </a> </article> <hr> <article> <h3> CVE-2025-4111 - PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4111 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/visitor-details.php. The manipulation of the argument Status leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4111"> read more </a> </article> <hr> <article> <h3> CVE-2025-4112 - PHPGurukul Student Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4112 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manipulation of the argument course-short leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4112"> read more </a> </article> <hr> <article> <h3> CVE-2025-4113 - PHPGurukul Curfew e-Pass Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4113 <br> <strong>Published : </strong> April 30, 2025, 11:15 a.m. | 1 hour, 22 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/edit-pass-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4113"> read more </a> </article> <hr> <article> <h3> CVE-2025-4108 - PHPGurukul Student Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4108 <br> <strong>Published : </strong> April 30, 2025, 10:15 a.m. | 2 hours, 22 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4108"> read more </a> </article> <hr> <article> <h3> CVE-2025-4109 - PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4109 <br> <strong>Published : </strong> April 30, 2025, 10:15 a.m. | 2 hours, 22 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-subadmin.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4109"> read more </a> </article> <hr> <article> <h3> CVE-2025-2890 - TagDiv Opt-In Builder WordPress SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-2890 <br> <strong>Published : </strong> April 30, 2025, 9:15 a.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘subscriptionCouponId’ parameter in all versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2890"> read more </a> </article> <hr> <article> <h3> CVE-2025-4124 - Delta Electronics ISPSoft Out-Of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4124 <br> <strong>Published : </strong> April 30, 2025, 9:15 a.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4124"> read more </a> </article> <hr> <article> <h3> CVE-2025-4125 - Delta Electronics ISPSoft Out-Of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4125 <br> <strong>Published : </strong> April 30, 2025, 9:15 a.m. | 3 hours, 22 minutes ago <br> <strong>Description : </strong>Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4125"> read more </a> </article> <hr> <article> <h3> CVE-2025-22882 - Delta Electronics ISPSoft Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-22882 <br> <strong>Published : </strong> April 30, 2025, 8:15 a.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22882"> read more </a> </article> <hr> <article> <h3> CVE-2025-22883 - Delta Electronics ISPSoft Out-Of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22883 <br> <strong>Published : </strong> April 30, 2025, 8:15 a.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22883"> read more </a> </article> <hr> <article> <h3> CVE-2025-22884 - Delta Electronics ISPSoft Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22884 <br> <strong>Published : </strong> April 30, 2025, 8:15 a.m. | 2 hours, 8 minutes ago <br> <strong>Description : </strong>Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22884"> read more </a> </article> <hr> <article> <h3> CVE-2025-3471 - "SureForms WordPress Plugin Unauthenticated Configuration Update" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3471 <br> <strong>Published : </strong> April 30, 2025, 6:15 a.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3471"> read more </a> </article> <hr> <article> <h3> CVE-2025-3953 - WordPress WP Statistics Unauthenticated Settings Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3953 <br> <strong>Published : </strong> April 30, 2025, 6:15 a.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'optionUpdater' function in all versions up to, and including, 14.13.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary plugin settings. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3953"> read more </a> </article> <hr> <article> <h3> CVE-2025-46778 - Apache HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46778 <br> <strong>Published : </strong> April 30, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46778"> read more </a> </article> <hr> <article> <h3> CVE-2025-46779 - Apache HTTP Server HTTP Header Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46779 <br> <strong>Published : </strong> April 30, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46779"> read more </a> </article> <hr> <article> <h3> CVE-2025-46780 - Apache HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46780 <br> <strong>Published : </strong> April 30, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46780"> read more </a> </article> <hr> <article> <h3> CVE-2025-46781 - Apache OpenOffice Insufficient Input Validation </h3> <p> <strong>CVE ID : </strong>CVE-2025-46781 <br> <strong>Published : </strong> April 30, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46781"> read more </a> </article> <hr> <article> <h3> CVE-2025-46782 - Apache HTTP Server Unvalidated Request Parameter </h3> <p> <strong>CVE ID : </strong>CVE-2025-46782 <br> <strong>Published : </strong> April 30, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46782"> read more </a> </article> <hr> <article> <h3> CVE-2025-30202 - vLLM ZeroMQ Denial of Service and Data Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30202 <br> <strong>Published : </strong> April 30, 2025, 1:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and prior to 0.8.5 are vulnerable to denial of service and data exposure via ZeroMQ on multi-node vLLM deployment. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-node communication purposes. The primary vLLM host opens an XPUB ZeroMQ socket and binds it to ALL interfaces. While the socket is always opened for a multi-node deployment, it is only used when doing tensor parallelism across multiple hosts. Any client with network access to this host can connect to this XPUB socket unless its port is blocked by a firewall. Once connected, these arbitrary clients will receive all of the same data broadcasted to all of the secondary vLLM hosts. This data is internal vLLM state information that is not useful to an attacker. By potentially connecting to this socket many times and not reading data published to them, an attacker can also cause a denial of service by slowing down or potentially blocking the publisher. This issue has been patched in version 0.8.5. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30202"> read more </a> </article> <hr> <article> <h3> CVE-2025-32444 - "vLLM Mooncake ZeroMQ Remote Code Execution" </h3> <p> <strong>CVE ID : </strong>CVE-2025-32444 <br> <strong>Published : </strong> April 30, 2025, 1:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerable sockets were set to listen on all network interfaces, increasing the likelihood that an attacker is able to reach the vulnerable ZeroMQ sockets to carry out an attack. vLLM instances that do not make use of the mooncake integration are not vulnerable. This issue has been patched in version 0.8.5. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32444"> read more </a> </article> <hr> <article> <h3> CVE-2025-46560 - LLaMA LLM Multimodal Tokenizer Resource Exhaustion </h3> <p> <strong>CVE ID : </strong>CVE-2025-46560 <br> <strong>Published : </strong> April 30, 2025, 1:15 a.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens (e.g., <|audio_|>, <|image_|>) with repeated tokens based on precomputed lengths. Due to inefficient list concatenation operations, the algorithm exhibits quadratic time complexity (O(n²)), allowing malicious actors to trigger resource exhaustion via specially crafted inputs. This issue has been patched in version 0.8.5. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 30 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46560"> read more </a> </article> <hr> <article> <h3> CVE-2025-29906 - Finit TTY Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29906 <br> <strong>Published : </strong> April 29, 2025, 11:16 p.m. | 11 hours, 8 minutes ago <br> <strong>Description : </strong>Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the `tty` configuration directive that can bypass `/bin/login`, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.11. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 23:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29906"> read more </a> </article> <hr> <article> <h3> CVE-2025-3358 - CVE-2022-36337Oracle WebLogic Server Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3358 <br> <strong>Published : </strong> April 29, 2025, 11:16 p.m. | 11 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 23:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3358"> read more </a> </article> <hr> <article> <h3> CVE-2025-46552 - GitHub KHC-INVITATION-AUTOMATION Unauthenticated User Data Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46552 <br> <strong>Published : </strong> April 29, 2025, 11:16 p.m. | 11 hours, 8 minutes ago <br> <strong>Description : </strong>KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization. In some commits on version 1.2, a vulnerability was identified where user data, including email addresses and Discord usernames, were exposed in API responses without proper access controls. This allowed unauthorized users to access sensitive user information by directly calling specific endpoints. This issue has been patched in a later commit on version 1.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 23:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46552"> read more </a> </article> <hr> <article> <h3> CVE-2023-4377 - Apache Struts Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-4377 <br> <strong>Published : </strong> April 29, 2025, 11:15 p.m. | 11 hours, 8 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-4377"> read more </a> </article> <hr> <article> <h3> CVE-2025-3910 - Keycloak Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3910 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 13 hours, 8 minutes ago <br> <strong>Description : </strong>A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3910"> read more </a> </article> <hr> <article> <h3> CVE-2025-46344 - Auth0 Next.js SDK: JWE Token Expiration Claim Omission </h3> <p> <strong>CVE ID : </strong>CVE-2025-46344 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 13 hours, 8 minutes ago <br> <strong>Description : </strong>The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke `.setExpirationTime` when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While the session cookie may expire or be cleared, the JWE remains valid. This issue has been patched in version 4.5.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46344"> read more </a> </article> <hr> <article> <h3> CVE-2025-46348 - YesWiki Unauthenticated Archive Creation and Download Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46348 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 13 hours, 8 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded without authentication. The archives are created with a predictable filename, so a malicious user could create and download an archive without being authenticated. This could result in a malicious attacker making numerous requests to create archives and fill up the file system, or by downloading the archive which contains sensitive site information. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46348"> read more </a> </article> <hr> <article> <h3> CVE-2025-46549 - YesWiki Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46549 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 13 hours, 8 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user’s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46549"> read more </a> </article> <hr> <article> <h3> CVE-2025-46550 - YesWiki Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46550 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 13 hours, 8 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user’s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46550"> read more </a> </article> <hr> <article> <h3> CVE-2025-3501 - Keycloak Certificate Verification Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3501 <br> <strong>Published : </strong> April 29, 2025, 9:15 p.m. | 11 hours, 17 minutes ago <br> <strong>Description : </strong>A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3501"> read more </a> </article> <hr> <article> <h3> CVE-2025-4078 - Wangshen SecGate 3600 2400 File Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4078 <br> <strong>Published : </strong> April 29, 2025, 8:15 p.m. | 12 hours, 17 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=log_export_file. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4078"> read more </a> </article> <hr> <article> <h3> CVE-2025-4080 - "PHPGurukul Online Nurse Hiring System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4080 <br> <strong>Published : </strong> April 29, 2025, 8:15 p.m. | 12 hours, 17 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4080"> read more </a> </article> <hr> <article> <h3> CVE-2024-57698 - Modernwms Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57698 <br> <strong>Published : </strong> April 29, 2025, 8:15 p.m. | 10 hours, 17 minutes ago <br> <strong>Description : </strong>An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the /user/list?culture=en-us endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57698"> read more </a> </article> <hr> <article> <h3> CVE-2025-0520 - ShowDoc Unrestricted File Upload RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-0520 <br> <strong>Published : </strong> April 29, 2025, 8:15 p.m. | 10 hours, 17 minutes ago <br> <strong>Description : </strong>An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0520"> read more </a> </article> <hr> <article> <h3> CVE-2025-4079 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4079 <br> <strong>Published : </strong> April 29, 2025, 7:15 p.m. | 11 hours, 16 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PCMan FTP Server up to 2.0.7. Affected is an unknown function of the component RENAME Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4079"> read more </a> </article> <hr> <article> <h3> CVE-2025-4077 - Code-projects School Billing System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4077 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 10 hours, 16 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4077"> read more </a> </article> <hr> <article> <h3> CVE-2025-4095 - Docker Desktop MacOS Registry Access Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4095 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 10 hours, 16 minutes ago <br> <strong>Description : </strong>Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4095"> read more </a> </article> <hr> <article> <h3> CVE-2025-46349 - YesWiki Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46349 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 8 hours, 15 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to perform arbitrary actions. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46349"> read more </a> </article> <hr> <article> <h3> CVE-2025-46350 - YesWiki Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46350 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 8 hours, 15 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to take over the user’s session. This vulnerability may also allow attackers to deface the website or embed malicious content. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46350"> read more </a> </article> <hr> <article> <h3> CVE-2025-4074 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4074 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 8 hours, 15 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4074"> read more </a> </article> <hr> <article> <h3> CVE-2025-4075 - VMSMan Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4075 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 8 hours, 15 minutes ago <br> <strong>Description : </strong>A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4075"> read more </a> </article> <hr> <article> <h3> CVE-2025-4076 - LB-LINK BL-AC3600 Password Handler Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4076 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 8 hours, 15 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_uci_set_option_string_0 of the file /cgi-bin/lighttpd.cgi of the component Password Handler. The manipulation of the argument routepwd leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4076"> read more </a> </article> <hr> <article> <h3> CVE-2025-3911 - Docker Desktop Environment Variable Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3911 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials information and further use it to gain unauthorized access to other systems. Starting with version 4.41.0, Docker Desktop no longer logs environment variables set by the user. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3911"> read more </a> </article> <hr> <article> <h3> CVE-2025-46347 - YesWiki Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46347 <br> <strong>Published : </strong> April 29, 2025, 6:15 p.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki vulnerable to remote code execution. An arbitrary file write can be used to write a file with a PHP extension, which then can be browsed to in order to execute arbitrary code on the server, resulting in a full compromise of the server. This could potentially be performed unwittingly by a user. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46347"> read more </a> </article> <hr> <article> <h3> CVE-2025-4073 - PHPGurukul Student Record System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4073 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an unknown function of the file /change-password.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4073"> read more </a> </article> <hr> <article> <h3> CVE-2025-0716 - AngularJS SVG Image Content Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-0716 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing and also negatively affect the application's performance and behavior by using too large or slow-to-load images. This issue affects all versions of AngularJS. Note: The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status . <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0716"> read more </a> </article> <hr> <article> <h3> CVE-2025-23180 - Apache HTTP Server Unprivileged Process Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-23180 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>CWE-250: Execution with Unnecessary Privileges <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23180"> read more </a> </article> <hr> <article> <h3> CVE-2025-23181 - Apache Tomcat Unprivileged Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23181 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>CWE-250: Execution with Unnecessary Privileges <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23181"> read more </a> </article> <hr> <article> <h3> CVE-2025-45956 - Sourcecodester Computer Laboratory Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-45956 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45956"> read more </a> </article> <hr> <article> <h3> CVE-2025-4072 - PHPGurukul Online Nurse Hiring System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4072 <br> <strong>Published : </strong> April 29, 2025, 5:15 p.m. | 3 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-nurse.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4072"> read more </a> </article> <hr> <article> <h3> CVE-2025-40616 - Bookgy Reflected XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-40616 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "IDRESERVA" parameter in /bkg_imprimir_comprobante.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40616"> read more </a> </article> <hr> <article> <h3> CVE-2025-40617 - Bookgy SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40617 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDTIPO", "IDPISTA" and "IDSOCIO" parameters in /bkg_seleccionar_hora_ajax.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40617"> read more </a> </article> <hr> <article> <h3> CVE-2025-40618 - Bookgy SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40618 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDRESERVA" parameter in /bkg_imprimir_comprobante.php <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40618"> read more </a> </article> <hr> <article> <h3> CVE-2025-40619 - Bookgy Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-40619 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40619"> read more </a> </article> <hr> <article> <h3> CVE-2025-46346 - YesWiki Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46346 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was discovered in the application’s comments feature. This issue allows a malicious actor to inject JavaScript payloads that are stored and later executed in the browser of any user viewing the affected comment. The XSS occurs because the application fails to properly sanitize or encode user input submitted to the comments. Notably, the application sanitizes or does not allow execution of `` tags, but does not account for payloads obfuscated using JavaScript block comments like `/* JavaScriptPayload */`. This issue has been patched in version 4.5.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46346"> read more </a> </article> <hr> <article> <h3> CVE-2025-4068 - Code-projects Simple Movie Ticket Booking System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4068 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4068"> read more </a> </article> <hr> <article> <h3> CVE-2025-4069 - Code-projects Product Management System Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4069 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affected by this issue is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4069"> read more </a> </article> <hr> <article> <h3> CVE-2025-4070 - PHPGurukul Rail Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4070 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4070"> read more </a> </article> <hr> <article> <h3> CVE-2025-4071 - PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4071 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 4 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4071"> read more </a> </article> <hr> <article> <h3> CVE-2025-40615 - Bookgy Reflected Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40615 <br> <strong>Published : </strong> April 29, 2025, 4:15 p.m. | 2 hours, 44 minutes ago <br> <strong>Description : </strong>Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "TEXTO" parameter in /api/api_ajustes.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40615"> read more </a> </article> <hr> <article> <h3> CVE-2025-4065 - ScriptAndTools Online-Travling-System Remote Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4065 <br> <strong>Published : </strong> April 29, 2025, 3:15 p.m. | 1 hour, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/addadvertisement.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4065"> read more </a> </article> <hr> <article> <h3> CVE-2025-4066 - ScriptAndTools Online-Travling-System Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4066 <br> <strong>Published : </strong> April 29, 2025, 3:15 p.m. | 1 hour, 13 minutes ago <br> <strong>Description : </strong>A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/addpackage.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4066"> read more </a> </article> <hr> <article> <h3> CVE-2025-4067 - ScriptAndTools Online-Travling-System Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4067 <br> <strong>Published : </strong> April 29, 2025, 3:15 p.m. | 1 hour, 13 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unknown function of the file /admin/viewpackage.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4067"> read more </a> </article> <hr> <article> <h3> CVE-2025-2817 - Mozilla Firefox System File Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-2817 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2817"> read more </a> </article> <hr> <article> <h3> CVE-2025-3301 - Marvell Series 2 DPA Vulnerability: ECDH and EdDSA Countermeasures Missing </h3> <p> <strong>CVE ID : </strong>CVE-2025-3301 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to use the impacted crypto curves and operations with ephemeral keys to reduce the number of DPA traces that can be collected. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3301"> read more </a> </article> <hr> <article> <h3> CVE-2025-4062 - Apache Code-Projects Theater Seat Booking System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4062 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4062"> read more </a> </article> <hr> <article> <h3> CVE-2025-4063 - Code-projects Student Information Management System Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4063 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4063"> read more </a> </article> <hr> <article> <h3> CVE-2025-4064 - ScriptAndTools Online-Travling-System Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4064 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/viewenquiry.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4064"> read more </a> </article> <hr> <article> <h3> CVE-2025-4082 - Mozilla Firefox WebGL Out-of-Bounds Read RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-4082 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4082"> read more </a> </article> <hr> <article> <h3> CVE-2025-4083 - Firefox JavaScript URI Isolation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4083 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4083"> read more </a> </article> <hr> <article> <h3> CVE-2025-4084 - "Firefox/Thunderbird Escaping Vulnerability (Local Code Execution)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4084 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4084"> read more </a> </article> <hr> <article> <h3> CVE-2025-4085 - Firefox UITour Actor Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-4085 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4085"> read more </a> </article> <hr> <article> <h3> CVE-2025-4086 - Mozilla Firefox and Thunderbird File Extension Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4086 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4086"> read more </a> </article> <hr> <article> <h3> CVE-2025-4087 - "Firefox XPath Parsing Memory Corruption Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4087 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4087"> read more </a> </article> <hr> <article> <h3> CVE-2025-4088 - "Firefox Storage Access API Cross-Site Request Forgery Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4088 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4088"> read more </a> </article> <hr> <article> <h3> CVE-2025-4089 - Mozilla Firefox/Thunderbird Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4089 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4089"> read more </a> </article> <hr> <article> <h3> CVE-2025-4090 - "Mozilla Firefox Android and Thunderbird Information Disclosure" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4090 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat. This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4090"> read more </a> </article> <hr> <article> <h3> CVE-2025-4091 - Mozilla Firefox and Thunderbird Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4091 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4091"> read more </a> </article> <hr> <article> <h3> CVE-2025-4092 - Firefox Memory Corruption Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4092 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138 and Thunderbird < 138. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4092"> read more </a> </article> <hr> <article> <h3> CVE-2025-4093 - "Firefox ESR and Thunderbird Memory Corruption Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4093 <br> <strong>Published : </strong> April 29, 2025, 2:15 p.m. | 2 hours, 14 minutes ago <br> <strong>Description : </strong>Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.10 and Thunderbird ESR < 128.10. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4093"> read more </a> </article> <hr> <article> <h3> CVE-2025-4035 - Libsoup Cookie Domain Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4035 <br> <strong>Published : </strong> April 29, 2025, 1:15 p.m. | 3 hours, 13 minutes ago <br> <strong>Description : </strong>A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4035"> read more </a> </article> <hr> <article> <h3> CVE-2025-4060 - PHPGurukul Notice Board System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4060 <br> <strong>Published : </strong> April 29, 2025, 1:15 p.m. | 3 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4060"> read more </a> </article> <hr> <article> <h3> CVE-2025-4061 - Code-projects Clothing Store Management System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4061 <br> <strong>Published : </strong> April 29, 2025, 1:15 p.m. | 3 hours, 13 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4061"> read more </a> </article> <hr> <article> <h3> CVE-2025-4058 - Projectworlds Online Examination System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4058 <br> <strong>Published : </strong> April 29, 2025, 12:15 p.m. | 4 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4058"> read more </a> </article> <hr> <article> <h3> CVE-2025-4059 - Code-projects Prison Management System Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-4059 <br> <strong>Published : </strong> April 29, 2025, 12:15 p.m. | 4 hours, 14 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4059"> read more </a> </article> <hr> <article> <h3> CVE-2025-3452 - SecuPress Free WordPress Security Plugin Unauthorized Plugin Installation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3452 <br> <strong>Published : </strong> April 29, 2025, 9:15 a.m. | 3 hours, 13 minutes ago <br> <strong>Description : </strong>The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_plugins_admin_ajax_cb' function in all versions up to, and including, 2.3.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3452"> read more </a> </article> <hr> <article> <h3> CVE-2025-2893 - WordPress Gutenverse Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-2893 <br> <strong>Published : </strong> April 29, 2025, 7:15 a.m. | 5 hours, 12 minutes ago <br> <strong>Description : </strong>The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2893"> read more </a> </article> <hr> <article> <h3> CVE-2024-12273 - CalculatedRoute Form WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-12273 <br> <strong>Published : </strong> April 29, 2025, 6:15 a.m. | 6 hours, 12 minutes ago <br> <strong>Description : </strong>The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12273"> read more </a> </article> <hr> <article> <h3> CVE-2025-46329 - Snowflake libsnowflakeclient Sensitive Information Logging </h3> <p> <strong>CVE ID : </strong>CVE-2025-46329 <br> <strong>Published : </strong> April 29, 2025, 5:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46329"> read more </a> </article> <hr> <article> <h3> CVE-2025-46330 - Snowflake libsnowflakeclient HTTP Request Retry Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46330 <br> <strong>Published : </strong> April 29, 2025, 5:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46330"> read more </a> </article> <hr> <article> <h3> CVE-2025-46338 - Audiobookshelf Reflected Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46338 <br> <strong>Published : </strong> April 29, 2025, 5:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unsanitized input is reflected in the server’s error message, enabling arbitrary JavaScript execution in a victim's browser. This issue has been patched in version 2.21.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46338"> read more </a> </article> <hr> <article> <h3> CVE-2025-46343 - n8n Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46343 <br> <strong>Published : </strong> April 29, 2025, 5:15 a.m. | 7 hours, 12 minutes ago <br> <strong>Description : </strong>n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) through the attachments view endpoint. n8n workflows can store and serve binary files, which are accessible to authenticated users. However, there is no restriction on the MIME type of uploaded files, and the MIME type could be controlled via a GET parameter. This allows the server to respond with any MIME type, potentially enabling malicious content to be interpreted and executed by the browser. An authenticated attacker with member-level permissions could exploit this by uploading a crafted HTML file containing malicious JavaScript. When another user visits the binary data endpoint with the MIME type set to text/html, the script executes in the context of the user’s session. This script could send a request to change the user’s email address in their account settings, effectively enabling account takeover. This issue has been patched in version 1.90.0. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46343"> read more </a> </article> <hr> <article> <h3> CVE-2025-24206 - Apple Local Network Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-24206 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24206"> read more </a> </article> <hr> <article> <h3> CVE-2025-24251 - Apple Local Network App Termination Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24251 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, watchOS 11.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24251"> read more </a> </article> <hr> <article> <h3> CVE-2025-24252 - Apple macOS Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24252 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24252"> read more </a> </article> <hr> <article> <h3> CVE-2025-24270 - Apple macOS Network Information Leakage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24270 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to leak sensitive user information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24270"> read more </a> </article> <hr> <article> <h3> CVE-2025-24271 - Apple AirPlay Unauthenticated Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24271 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24271"> read more </a> </article> <hr> <article> <h3> CVE-2025-30445 - Apple Type Confusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30445 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30445"> read more </a> </article> <hr> <article> <h3> CVE-2025-31197 - Apple macOS and iOS Local Network App Termination Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31197 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31197"> read more </a> </article> <hr> <article> <h3> CVE-2025-31202 - Apple iOS/ iPadOS/ macOS/ tvOS/ visionOS Denial-of-Service Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-31202 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31202"> read more </a> </article> <hr> <article> <h3> CVE-2025-31203 - Apple macOS Sequoia Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31203 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, watchOS 11.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31203"> read more </a> </article> <hr> <article> <h3> CVE-2025-46753 - Cisco Webex Meeting Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46753 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46753"> read more </a> </article> <hr> <article> <h3> CVE-2025-46754 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46754 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46754"> read more </a> </article> <hr> <article> <h3> CVE-2025-46755 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46755 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46755"> read more </a> </article> <hr> <article> <h3> CVE-2025-46756 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-46756 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46756"> read more </a> </article> <hr> <article> <h3> CVE-2025-46757 - Adobe Acrobat Deserialization </h3> <p> <strong>CVE ID : </strong>CVE-2025-46757 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46757"> read more </a> </article> <hr> <article> <h3> CVE-2025-46758 - Apache HTTP Server Arbitrary File Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46758 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46758"> read more </a> </article> <hr> <article> <h3> CVE-2025-46759 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-46759 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46759"> read more </a> </article> <hr> <article> <h3> CVE-2025-46760 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46760 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46760"> read more </a> </article> <hr> <article> <h3> CVE-2025-46761 - Apache HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46761 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46761"> read more </a> </article> <hr> <article> <h3> CVE-2025-24179 - "Apple iOS and macOS Null Pointer Dereference Denial-of-Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-24179 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 5 hours, 3 minutes ago <br> <strong>Description : </strong>A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3, tvOS 18.3. An attacker on the local network may be able to cause a denial-of-service. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24179"> read more </a> </article> <hr> <article> <h3> CVE-2018-13372 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2018-13372 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 3 hours, 51 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2018-13372"> read more </a> </article> <hr> <article> <h3> CVE-2017-7740 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2017-7740 <br> <strong>Published : </strong> April 29, 2025, 3:15 a.m. | 2 hours, 54 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 29 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2017-7740"> read more </a> </article> <hr> <article> <h3> CVE-2025-46326 - Snowflake-Connector-Net TOCTOU Race Condition Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46326 <br> <strong>Published : </strong> April 28, 2025, 11:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided file. On Linux and macOS, the Connector verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Connector. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 4.4.1. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46326"> read more </a> </article> <hr> <article> <h3> CVE-2025-46327 - Snowflake Golang Driver Local File Configuration TOCTOU </h3> <p> <strong>CVE ID : </strong>CVE-2025-46327 <br> <strong>Published : </strong> April 28, 2025, 11:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 1.13.3. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46327"> read more </a> </article> <hr> <article> <h3> CVE-2025-46328 - Snowflake-Connector-Nodejs TOCTOU Race Condition Local File Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46328 <br> <strong>Published : </strong> April 28, 2025, 11:15 p.m. | 3 hours, 10 minutes ago <br> <strong>Description : </strong>snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file or the directory containing it to overwrite the configuration and gain control over logging level and output location. This issue has been patched in version 2.0.4. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46328"> read more </a> </article> <hr> <article> <h3> CVE-2025-4039 - PHPGurukul Rail Pass Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4039 <br> <strong>Published : </strong> April 28, 2025, 10:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4039"> read more </a> </article> <hr> <article> <h3> CVE-2024-10635 - Enterprise Protection S/MIME Attachment Defense Improper Input Validation </h3> <p> <strong>CVE ID : </strong>CVE-2024-10635 <br> <strong>Published : </strong> April 28, 2025, 9:15 p.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-10635"> read more </a> </article> <hr> <article> <h3> CVE-2024-11922 - Fortra GoAnywhere Email Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11922 <br> <strong>Published : </strong> April 28, 2025, 9:15 p.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or JavaScript into an email. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11922"> read more </a> </article> <hr> <article> <h3> CVE-2025-0049 - GoAnywhere Directory Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-0049 <br> <strong>Published : </strong> April 28, 2025, 9:15 p.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0049"> read more </a> </article> <hr> <article> <h3> CVE-2025-4037 - Code-Projects ATM Banking Business Logic Error </h3> <p> <strong>CVE ID : </strong>CVE-2025-4037 <br> <strong>Published : </strong> April 28, 2025, 9:15 p.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4037"> read more </a> </article> <hr> <article> <h3> CVE-2025-4038 - Code-projects Train Ticket Reservation System Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4038 <br> <strong>Published : </strong> April 28, 2025, 9:15 p.m. | 5 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argument Name leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4038"> read more </a> </article> <hr> <article> <h3> CVE-2025-31650 - Apache Tomcat HTTP Priority Header Memory Leak DoS </h3> <p> <strong>CVE ID : </strong>CVE-2025-31650 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service. This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5. Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31650"> read more </a> </article> <hr> <article> <h3> CVE-2025-31651 - Apache Tomcat Improper Neutralization of Escape, Meta, or Control Sequences </h3> <p> <strong>CVE ID : </strong>CVE-2025-31651 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31651"> read more </a> </article> <hr> <article> <h3> CVE-2025-34491 - GFI MailEssentials .NET Deserialization Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-34491 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34491"> read more </a> </article> <hr> <article> <h3> CVE-2025-3224 - Docker Desktop for Windows Elevation of Privilege Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3224 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with high privileges. However, this directory often does not exist by default, and C:\ProgramData\ allows normal users to create new directories. By creating a malicious Docker\config folder structure at this location, an attacker can force the privileged update process to delete or manipulate arbitrary system files, leading to Elevation of Privilege. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3224"> read more </a> </article> <hr> <article> <h3> CVE-2025-45947 - PhpGurukul Online Banquet Booking System Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45947 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45947"> read more </a> </article> <hr> <article> <h3> CVE-2025-45949 - PHPGurukul User Registration Login and User Management System Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45949 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45949"> read more </a> </article> <hr> <article> <h3> CVE-2025-45953 - PHPGurukul Hostel Management System Session Hijacking </h3> <p> <strong>CVE ID : </strong>CVE-2025-45953 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45953"> read more </a> </article> <hr> <article> <h3> CVE-2025-4034 - Projectworlds Online Examination System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4034 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4034"> read more </a> </article> <hr> <article> <h3> CVE-2025-4036 - Apache Novel Remote Code Execution via Improper Access Control </h3> <p> <strong>CVE ID : </strong>CVE-2025-4036 <br> <strong>Published : </strong> April 28, 2025, 8:15 p.m. | 6 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4036"> read more </a> </article> <hr> <article> <h3> CVE-2025-34489 - GFI MailEssentials Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-34489 <br> <strong>Published : </strong> April 28, 2025, 7:15 p.m. | 7 hours, 10 minutes ago <br> <strong>Description : </strong>GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34489"> read more </a> </article> <hr> <article> <h3> CVE-2025-34490 - GFI MailEssentials XXE Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-34490 <br> <strong>Published : </strong> April 28, 2025, 7:15 p.m. | 7 hours, 10 minutes ago <br> <strong>Description : </strong>GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34490"> read more </a> </article> <hr> <article> <h3> CVE-2025-4032 - InclusionAI AWorld Os Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4032 <br> <strong>Published : </strong> April 28, 2025, 7:15 p.m. | 7 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtual_environments/terminals/shell_tool.py. The manipulation leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4032"> read more </a> </article> <hr> <article> <h3> CVE-2025-4033 - PHPGurukul Nipah Virus Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4033 <br> <strong>Published : </strong> April 28, 2025, 7:15 p.m. | 7 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /patient-search-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4033"> read more </a> </article> <hr> <article> <h3> CVE-2024-12706 - OpenText Digital Asset Management SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2024-12706 <br> <strong>Published : </strong> April 28, 2025, 6:15 p.m. | 8 hours, 10 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.: through 24.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12706"> read more </a> </article> <hr> <article> <h3> CVE-2025-4030 - "PHPGurukul COVID19 Testing Management System SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4030 <br> <strong>Published : </strong> April 28, 2025, 6:15 p.m. | 8 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4030"> read more </a> </article> <hr> <article> <h3> CVE-2025-4031 - PHPGurukul Pre-School Enrollment System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4031 <br> <strong>Published : </strong> April 28, 2025, 6:15 p.m. | 8 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4031"> read more </a> </article> <hr> <article> <h3> CVE-2023-42404 - OneVision Workspace Java EL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2023-42404 <br> <strong>Published : </strong> April 28, 2025, 5:15 p.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-42404"> read more </a> </article> <hr> <article> <h3> CVE-2024-32499 - Newforma Project Center Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-32499 <br> <strong>Published : </strong> April 28, 2025, 5:15 p.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-32499"> read more </a> </article> <hr> <article> <h3> CVE-2025-4028 - PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4028 <br> <strong>Published : </strong> April 28, 2025, 5:15 p.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4028"> read more </a> </article> <hr> <article> <h3> CVE-2025-4029 - Apache Code-projects Personal Diary Stack-based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4029 <br> <strong>Published : </strong> April 28, 2025, 5:15 p.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4029"> read more </a> </article> <hr> <article> <h3> CVE-2015-4582 - TheCartPress Boot Store WordPress Header PHP TCP Register Error XSS </h3> <p> <strong>CVE ID : </strong>CVE-2015-4582 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2015-4582"> read more </a> </article> <hr> <article> <h3> CVE-2022-41871 - SEPPmail Root Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-41871 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-41871"> read more </a> </article> <hr> <article> <h3> CVE-2023-35814 - DevExpress ASP.NET XtraReport Data Serialization Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-35814 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-35814"> read more </a> </article> <hr> <article> <h3> CVE-2023-35815 - DevExpress XML Deserialization Data-Sourcing Protection Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2023-35815 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-35815"> read more </a> </article> <hr> <article> <h3> CVE-2023-35816 - DevExpress TypeConverter Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-35816 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>DevExpress before 23.1.3 allows arbitrary TypeConverter conversion. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-35816"> read more </a> </article> <hr> <article> <h3> CVE-2023-35817 - DevExpress AsyncDownloader SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2023-35817 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>DevExpress before 23.1.3 allows AsyncDownloader SSRF. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-35817"> read more </a> </article> <hr> <article> <h3> CVE-2025-43854 - DIFY Clickjacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43854 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in the default setup of the DIFY application, allowing malicious actors to trick users into clicking on elements of the web page without their knowledge or consent. This can lead to unauthorized actions being performed, potentially compromising the security and privacy of users. This issue has been fixed in version 1.3.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43854"> read more </a> </article> <hr> <article> <h3> CVE-2025-43857 - Net::IMAP Denial of Service Memory Exhaustion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43857 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a possibility for denial of service by memory exhaustion when net-imap reads server responses. At any time while the client is connected, a malicious server can send can send a "literal" byte count, which is automatically read by the client's receiver thread. The response reader immediately allocates memory for the number of bytes indicated by the server response. This should not be an issue when securely connecting to trusted IMAP servers that are well-behaved. It can affect insecure connections and buggy, untrusted, or compromised servers (for example, connecting to a user supplied hostname). This issue has been patched in versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43857"> read more </a> </article> <hr> <article> <h3> CVE-2025-46614 - Snowflake ODBC Driver Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46614 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46614"> read more </a> </article> <hr> <article> <h3> CVE-2025-4026 - PHPGurukul Nipah Virus Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4026 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4026"> read more </a> </article> <hr> <article> <h3> CVE-2025-4027 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4027 <br> <strong>Published : </strong> April 28, 2025, 4:15 p.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4027"> read more </a> </article> <hr> <article> <h3> CVE-2015-2079 - Usermin File Open Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2015-2079 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2015-2079"> read more </a> </article> <hr> <article> <h3> CVE-2025-23375 - Dell PowerProtect Data Manager Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23375 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23375"> read more </a> </article> <hr> <article> <h3> CVE-2025-23376 - Dell PowerProtect Data Manager Template Engine Template Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23376 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. <br> <strong>Severity:</strong> 2.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23376"> read more </a> </article> <hr> <article> <h3> CVE-2025-23377 - Dell PowerProtect Data Manager Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-23377 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23377"> read more </a> </article> <hr> <article> <h3> CVE-2025-25776 - Codeastro Bus Ticket Booking System XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-25776 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25776"> read more </a> </article> <hr> <article> <h3> CVE-2025-4024 - iSourcecode Placement Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4024 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /add_drive.php. The manipulation of the argument drive_title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4024"> read more </a> </article> <hr> <article> <h3> CVE-2025-4025 - iSourcecode Placement Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4025 <br> <strong>Published : </strong> April 28, 2025, 3:15 p.m. | 3 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4025"> read more </a> </article> <hr> <article> <h3> CVE-2025-4022 - Web-Arena-X Web Content Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4022 <br> <strong>Published : </strong> April 28, 2025, 2:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in web-arena-x webarena up to 0.2.0. It has been declared as critical. This vulnerability affects the function HTMLContentEvaluator of the file webarena/evaluation_harness/evaluators.py. The manipulation of the argument target["url"] leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4022"> read more </a> </article> <hr> <article> <h3> CVE-2025-4023 - iSourcecode Placement Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4023 <br> <strong>Published : </strong> April 28, 2025, 2:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add_company.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4023"> read more </a> </article> <hr> <article> <h3> Le France Cybersecurity challenge s'achève </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Le France Cybersecurity challenge s'achève</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-fin-fcsc.png?h=284f21b9&itok=2V7am1d_"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu-fin-fcsc.png?h=284f21b9&itok=j5V0wSEi"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu-fin-fcsc.png?h=284f21b9&itok=bxFLDRuS"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu-fin-fcsc.png?h=284f21b9&itok=IPyMMwPM"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-fin-fcsc.png?h=284f21b9&itok=2V7am1d_" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-28T13:43:29+00:00" title="Lundi 28 Avril 2025 - 13:43" class="datetime">lun 28/04/2025 - 13:43</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">L’édition 2025 du France Cybersecurity challenge (FCSC) qui a débuté le 18 avril s’est achevée ce dimanche 27 avril, après 10 jours de compétition et une participation record.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3><strong>Plus de 2000 hackers réunis pour relever le défi</strong></h3> <p>Le FCSC 2025 a réuni plus de 2000 hackers éthiques qui se sont affrontés à travers une centaine d'épreuves spécialement élaborées par les experts de l'ANSSI.</p> <p>Grande nouveauté cette année avec l’introduction pour la première fois d’épreuves de rapidité (« speedrun »), une journée entière pour tester la créativité et l'expertise des participants sur de tout nouveaux challenges.</p> <p>Retrouvez le classement complet de cette édition 2025 sur <a href="https://fcsc.fr/">FCSC 2025</a><u>.</u></p> <h3><strong>En route vers l’European Cybersecurity challenge (ECSC)</strong></h3> <p>Pour rappel, la compétition fait également office de point de départ pour les 14 joueurs de 14 à 25 ans (10 titulaires et 4 remplaçants) qui seront prochainement sélectionnés pour représenter la France lors de l’European Cybersecurity Challenge (ECSC).</p> <p>En plus de leurs résultats respectifs lors du FCSC, ces joueurs seront recrutés via un système d’entretiens par les coachs de l’ANSSI pour leurs expertises, leur talent, leurs qualités humaines et leur sens du collectif. Cette année, la Team France se rendra à Varsovie, du 6 au 10 octobre 2025.</p> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 28 Apr 2025 13:43:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/le-france-cybersecurity-challenge-sacheve"> read more </a> </article> <hr> <article> <h3> CVE-2025-4021 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4021 <br> <strong>Published : </strong> April 28, 2025, 1:15 p.m. | 5 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit_spatient.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4021"> read more </a> </article> <hr> <article> <h3> CVE-2025-32472 - HPE MultiScan and picoScan Slowloris Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32472 <br> <strong>Published : </strong> April 28, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32472"> read more </a> </article> <hr> <article> <h3> CVE-2025-46661 - IPW Systems Metazo Server-Side Template-Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46661 <br> <strong>Published : </strong> April 28, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46661"> read more </a> </article> <hr> <article> <h3> CVE-2025-4020 - PHPGurukul Old Age Home Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-4020 <br> <strong>Published : </strong> April 28, 2025, 1:15 p.m. | 3 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4020"> read more </a> </article> <hr> <article> <h3> CVE-2025-4018 - Novel-Plus Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4018 <br> <strong>Published : </strong> April 28, 2025, 12:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4018"> read more </a> </article> <hr> <article> <h3> CVE-2025-4019 - Apache Novel-Plus Missing Authentication Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4019 <br> <strong>Published : </strong> April 28, 2025, 12:15 p.m. | 4 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4019"> read more </a> </article> <hr> <article> <h3> CVE-2025-4016 - Novel-Plus LogController Java Remote Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4016 <br> <strong>Published : </strong> April 28, 2025, 11:15 a.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the function deleteIndex of the file novel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4016"> read more </a> </article> <hr> <article> <h3> CVE-2025-4017 - Novel-Plus LogController Java Unauthenticated Remote Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-4017 <br> <strong>Published : </strong> April 28, 2025, 11:15 a.m. | 5 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the function list of the file nnovel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4017"> read more </a> </article> <hr> <article> <h3> CVE-2025-3200 - "Com-Server TLS Protocol Downgrade Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3200 <br> <strong>Published : </strong> April 28, 2025, 10:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3200"> read more </a> </article> <hr> <article> <h3> CVE-2025-4014 - PHPGurukul Art Gallery Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4014 <br> <strong>Published : </strong> April 28, 2025, 10:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-art-medium.php. The manipulation of the argument artmed leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4014"> read more </a> </article> <hr> <article> <h3> CVE-2025-4015 - Novel-Plus SessionController Missing Authentication Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4015 <br> <strong>Published : </strong> April 28, 2025, 10:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4015"> read more </a> </article> <hr> <article> <h3> Bilan du volet cybersécurité de France Relance : un défi réussi </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Bilan du volet cybersécurité de France Relance : un défi réussi </span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actualite-RA-FR-2024.png?h=284f21b9&itok=Zgv3f2bO"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actualite-RA-FR-2024.png?h=284f21b9&itok=-zb9FsLD"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actualite-RA-FR-2024.png?h=284f21b9&itok=tg6kHabJ"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actualite-RA-FR-2024.png?h=284f21b9&itok=ts4Ejb2j"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actualite-RA-FR-2024.png?h=284f21b9&itok=Zgv3f2bO" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-28T10:10:23+00:00" title="Lundi 28 Avril 2025 - 10:10" class="datetime">lun 28/04/2025 - 10:10</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Le dernier rapport d’activité du volet cybersécurité de France Relance présente les travaux entrepris par l’ANSSI sur 2024, année de clôture du programme sur le plan financier. Ce dernier volet illustre les actions menées par l’Agence durant 4 ans qui ont permis d’améliorer significativement l’accompagnement des entités vers une meilleure cybersécurité. </div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Avec 100 millions d’euros, le programme des parcours de cybersécurité a constitué un investissement sans précédent pour répondre à une menace devenue systémique, touchant des entités critiques au cœur des territoires.</p> <p>Les « parcours de cybersécurité » avaient pour objectif d’élever la sécurité numérique des services publics, de dynamiser l’industrie de cybersécurité française et européenne et de favoriser des investissements durables au service de la cybersécurité des organisations.</p> <p>Pendant 4 ans, l’ANSSI a conçu, déployé et piloté un dispositif d’accompagnement au profit des collectivités, des établissements de santé et des entités publiques. Ainsi, 945 entités parmi les plus vulnérables à la menace cyber ont pu bénéficier de cet accompagnement, dont :</p> <ul><li>707 collectivités territoriales,</li> <li>134 établissements de santé,</li> <li>87 autres établissements publics,</li> <li>17 centres de recherche et d’enseignement supérieur,</li> </ul><p>Parmi celles-ci, 62 entités ont été accompagnées dans les territoires d’Outre-mer.</p> <p>Les parcours ont permis d’élever le niveau de cyberdéfense des bénéficiaires de manière significative : en moyenne, les bénéficiaires sont passés d’un score de maturité cyber de D+ à B, soulignant un progrès conséquent. Grâce aux parcours, les entités ont réussi à s’intégrer dans l’écosystème cyber de leur territoire et de leur secteur, en lien avec l’ANSSI, et sont ainsi solidement ancrées dans une démarche de sécurisation à long terme.</p> <p>Au-delà des bénéfices pour les entités accompagnées, les parcours de cybersécurité laissent un héritage exploitable dans la durée, notamment dans la perspective de la mise en œuvre de la directive NIS 2 avec la mise à disposition d’outils et de méthodes adaptés aux besoins de chaque bénéficiaire.</p> <p>Le programme a permis de dynamiser l’offre industrielle de cybersécurité dans les territoires et de renforcer l’offre française et européenne de cybersécurité :</p> <ul><li>197 prestataires présents sur l’ensemble du territoire national ont été impliqués.</li> <li>40 millions d’euros ont été dédiés à l’acquisition de produits de cybersécurité français et européens (dont 33 millions d’euros pour des produits français).</li> </ul><p>Les parcours de cybersécurité sont un succès, avec des effets tangibles et durables pour les bénéficiaires. Ils font partie d'un programme plus large de soutien à la transformation numérique et à la résilience des systèmes d'information, dans un contexte où les cybermenaces se multiplient.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://cyber.gouv.fr/publications/rapport-dactivite-france-relance-2024" se="" rendre="" sur="" rapport="" d="" france="" relance=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Rapport d'activité France Relance 2024 </a> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 28 Apr 2025 10:10:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/bilan-du-volet-cybersecurite-de-france-relance-un-defi-reussi"> read more </a> </article> <hr> <article> <h3> CVE-2025-39367 - SeventhQueen Kleo Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39367 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in SeventhQueen Kleo.This issue affects Kleo: from n/a before 5.4.4. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39367"> read more </a> </article> <hr> <article> <h3> CVE-2025-42598 - Seiko Epson Printer DLL Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42598 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary code with SYSTEM privilege on a Windows system on which the printer driver is installed. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42598"> read more </a> </article> <hr> <article> <h3> CVE-2025-4011 - Redmine Custom Query Handler Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4011 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4011"> read more </a> </article> <hr> <article> <h3> CVE-2025-4012 - Playeduxyz PlayEdu SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4012 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic. This issue affects some unknown processing of the file /api/backend/v1/user/create of the component User Avatar Handler. The manipulation of the argument Avatar leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4012"> read more </a> </article> <hr> <article> <h3> CVE-2025-4013 - PHPGurukul Art Gallery Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4013 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4013"> read more </a> </article> <hr> <article> <h3> CVE-2025-32470 - Apache HTTP Server DNS Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-32470 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 5 hours, 26 minutes ago <br> <strong>Description : </strong>A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availability of the device. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32470"> read more </a> </article> <hr> <article> <h3> CVE-2025-32471 - Cisco ASA Unsalted Password Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32471 <br> <strong>Published : </strong> April 28, 2025, 9:15 a.m. | 5 hours, 26 minutes ago <br> <strong>Description : </strong>The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32471"> read more </a> </article> <hr> <article> <h3> CVE-2025-22235 - Spring Security Endpoint Request Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-22235 <br> <strong>Published : </strong> April 28, 2025, 8:15 a.m. | 6 hours, 26 minutes ago <br> <strong>Description : </strong>EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Security * EndpointRequest.to() has been used in a Spring Security chain configuration * The endpoint which EndpointRequest references is disabled or not exposed via web * Your application handles requests to /null and this path needs protection You are not affected if any of the following is true: * You don't use Spring Security * You don't use EndpointRequest.to() * The endpoint which EndpointRequest.to() refers to is enabled and is exposed * Your application does not handle requests to /null or this path does not need protection <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22235"> read more </a> </article> <hr> <article> <h3> CVE-2025-4007 - Tenda W12 and i24 HTTPd Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4007 <br> <strong>Published : </strong> April 28, 2025, 8:15 a.m. | 6 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4007"> read more </a> </article> <hr> <article> <h3> CVE-2025-4005 - PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4005 <br> <strong>Published : </strong> April 28, 2025, 7:15 a.m. | 7 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4005"> read more </a> </article> <hr> <article> <h3> CVE-2025-4006 - Youyiio BeyongCms Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4006 <br> <strong>Published : </strong> April 28, 2025, 7:15 a.m. | 7 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/Upload.html of the component Document Management Page. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4006"> read more </a> </article> <hr> <article> <h3> CVE-2025-4004 - PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4004 <br> <strong>Published : </strong> April 28, 2025, 6:15 a.m. | 8 hours, 26 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument contactno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4004"> read more </a> </article> <hr> <article> <h3> CVE-2024-13688 - WordPress ASE Password Protection Hardcoded Password Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-13688 <br> <strong>Published : </strong> April 28, 2025, 6:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13688"> read more </a> </article> <hr> <article> <h3> CVE-2024-9771 - WordPress WP-Recall Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-9771 <br> <strong>Published : </strong> April 28, 2025, 6:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9771"> read more </a> </article> <hr> <article> <h3> CVE-2025-0627 - WordPress Tag, Category, and Taxonomy Manager Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0627 <br> <strong>Published : </strong> April 28, 2025, 6:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0627"> read more </a> </article> <hr> <article> <h3> CVE-2025-4003 - Apache RefindPlus null pointer dereference vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4003 <br> <strong>Published : </strong> April 28, 2025, 6:15 a.m. | 6 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock of the file Library/RP_ApfsLib/RP_ApfsIo.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The patch is named 4d35125ca689a255647e9033dd60c257d26df7cb. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4003"> read more </a> </article> <hr> <article> <h3> CVE-2025-4001 - "Scip File Descriptor Handler Uncontrolled File Descriptor Consumption Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-4001 <br> <strong>Published : </strong> April 28, 2025, 5:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled file descriptor consumption. Local access is required to approach this attack. Upgrading to version 9.2.2 is able to address this issue. The identifier of the patch is d6da63b941216d75fbc1aefea9abf1de6712a2d0. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4001"> read more </a> </article> <hr> <article> <h3> CVE-2025-4002 - Apache RefindPlus Local Null Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4002 <br> <strong>Published : </strong> April 28, 2025, 5:15 a.m. | 7 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDebugLogFile of the file Library/MemLogLib/BootLog.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The patch is identified as d2143a1e2deefddd9b105fb7160763c4f8d47ea2. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4002"> read more </a> </article> <hr> <article> <h3> CVE-2025-3999 - Seeyon Zhiyuan OA Web Application System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3999 <br> <strong>Published : </strong> April 28, 2025, 4:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3999"> read more </a> </article> <hr> <article> <h3> CVE-2025-4000 - Seeyon Zhiyuan OA Web Application System Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-4000 <br> <strong>Published : </strong> April 28, 2025, 4:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\ssoproxy\jsp\ssoproxy.jsp. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-4000"> read more </a> </article> <hr> <article> <h3> CVE-2025-3998 - CodeAstro Membership Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3998 <br> <strong>Published : </strong> April 28, 2025, 4:15 a.m. | 6 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?id=6. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3998"> read more </a> </article> <hr> <article> <h3> CVE-2025-3706 - 104 Corporation eHRMS Reflected Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3706 <br> <strong>Published : </strong> April 28, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3706"> read more </a> </article> <hr> <article> <h3> CVE-2025-3996 - TOTOLINK N150RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3996 <br> <strong>Published : </strong> April 28, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home.htm of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3996"> read more </a> </article> <hr> <article> <h3> CVE-2025-3997 - Dazhouda lecms Cross-Site Request Forgery (CSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3997 <br> <strong>Published : </strong> April 28, 2025, 3:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-profile-ajax-1 of the component Personal Information Page. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3997"> read more </a> </article> <hr> <article> <h3> CVE-2025-3995 - TOTOLINK N150RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3995 <br> <strong>Published : </strong> April 28, 2025, 2:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /boafrm/fromStaticDHCP of the component LAN Settings Page. The manipulation of the argument Hostname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3995"> read more </a> </article> <hr> <article> <h3> CVE-2025-3993 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3993 <br> <strong>Published : </strong> April 28, 2025, 1:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3993"> read more </a> </article> <hr> <article> <h3> CVE-2025-3994 - TOTOLINK N150RT Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3994 <br> <strong>Published : </strong> April 28, 2025, 1:15 a.m. | 7 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been classified as problematic. Affected is an unknown function of the file /home.htm of the component IP Port Filtering. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3994"> read more </a> </article> <hr> <article> <h3> CVE-2025-26692 - Quick Agent Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26692 <br> <strong>Published : </strong> April 28, 2025, 12:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26692"> read more </a> </article> <hr> <article> <h3> CVE-2025-27937 - Quick Agent Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27937 <br> <strong>Published : </strong> April 28, 2025, 12:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27937"> read more </a> </article> <hr> <article> <h3> CVE-2025-31144 - Quick Agent Windows RCE Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31144 <br> <strong>Published : </strong> April 28, 2025, 12:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31144"> read more </a> </article> <hr> <article> <h3> CVE-2025-3991 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3991 <br> <strong>Published : </strong> April 28, 2025, 12:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3991"> read more </a> </article> <hr> <article> <h3> CVE-2025-3992 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3992 <br> <strong>Published : </strong> April 28, 2025, 12:15 a.m. | 8 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlwds. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 28 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3992"> read more </a> </article> <hr> <article> <h3> CVE-2025-3989 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3989 <br> <strong>Published : </strong> April 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the argument Hostname leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3989"> read more </a> </article> <hr> <article> <h3> CVE-2025-3990 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3990 <br> <strong>Published : </strong> April 27, 2025, 11:15 p.m. | 9 hours, 8 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this issue is some unknown functionality of the file /boafrm/formVlan. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3990"> read more </a> </article> <hr> <article> <h3> CVE-2025-3987 - TOTOLINK N150RT Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3987 <br> <strong>Published : </strong> April 27, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3987"> read more </a> </article> <hr> <article> <h3> CVE-2025-3988 - TOTOLINK N150RT Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3988 <br> <strong>Published : </strong> April 27, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown function of the file /boafrm/formPortFw. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3988"> read more </a> </article> <hr> <article> <h3> CVE-2025-46689 - Ververica Platform Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-46689 <br> <strong>Published : </strong> April 27, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46689"> read more </a> </article> <hr> <article> <h3> CVE-2025-46690 - Ververica Platform SQL Connector Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46690 <br> <strong>Published : </strong> April 27, 2025, 10:15 p.m. | 8 hours, 2 minutes ago <br> <strong>Description : </strong>Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46690"> read more </a> </article> <hr> <article> <h3> CVE-2025-3985 - Apereo CAS Remote Regular Expression Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3985 <br> <strong>Published : </strong> April 27, 2025, 9:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Apereo CAS 5.2.6. It has been classified as problematic. This affects the function ResponseEntity of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\ManageRegisteredServicesMultiActionController.java. The manipulation of the argument Query leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3985"> read more </a> </article> <hr> <article> <h3> CVE-2025-3986 - Apache Apereo CAS Regular Expression Inefficient Complexity Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3986 <br> <strong>Published : </strong> April 27, 2025, 9:15 p.m. | 9 hours, 2 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\core\cas-server-core-configuration-metadata-repository\src\main\java\org\apereo\cas\metadata\rest\CasConfigurationMetadataServerController.java. The manipulation of the argument Name leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3986"> read more </a> </article> <hr> <article> <h3> CVE-2025-46688 - QuickJS Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46688 <br> <strong>Published : </strong> April 27, 2025, 8:15 p.m. | 10 hours, 2 minutes ago <br> <strong>Description : </strong>quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46688"> read more </a> </article> <hr> <article> <h3> CVE-2025-3983 - AMTT Hotel Broadband Operation System NLog Down.php Remote Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3983 <br> <strong>Published : </strong> April 27, 2025, 8:15 p.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlog_down.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3983"> read more </a> </article> <hr> <article> <h3> CVE-2025-3984 - Apereo CAS Groovy Code Handler Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3984 <br> <strong>Published : </strong> April 27, 2025, 8:15 p.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6\webapp-mgmt\cas-management-webapp-support\src\main\java\org\apereo\cas\mgmt\services\web\RegisteredServiceSimpleFormController.java of the component Groovy Code Handler. The manipulation leads to code injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3984"> read more </a> </article> <hr> <article> <h3> CVE-2025-46687 - QuickJS Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46687 <br> <strong>Published : </strong> April 27, 2025, 8:15 p.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46687"> read more </a> </article> <hr> <article> <h3> CVE-2025-2866 - LibreOffice PDF Signature Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2025-2866 <br> <strong>Published : </strong> April 27, 2025, 7:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2866"> read more </a> </article> <hr> <article> <h3> CVE-2025-3981 - "Wowjoy Internet Doctor Workstation System Remote Unauthorized Access Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3981 <br> <strong>Published : </strong> April 27, 2025, 7:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This issue affects some unknown processing of the file /v1/prescription/details/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3981"> read more </a> </article> <hr> <article> <h3> CVE-2025-3982 - Nortikin Sverchok Prototype Pollution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3982 <br> <strong>Published : </strong> April 27, 2025, 7:15 p.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in nortikin Sverchok 1.3.0. Affected is the function SvSetPropNodeMK2 of the file sverchok/nodes/object_nodes/getsetprop_mk2.py of the component Set Property Mk2 Node. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3982"> read more </a> </article> <hr> <article> <h3> CVE-2025-3979 - Dazhouda Lcms CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3979 <br> <strong>Published : </strong> April 27, 2025, 6:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3979"> read more </a> </article> <hr> <article> <h3> CVE-2025-3980 - Wowjoy Internet Doctor Workstation System Remote Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3980 <br> <strong>Published : </strong> April 27, 2025, 6:15 p.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This vulnerability affects unknown code of the file /v1/prescription/list. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3980"> read more </a> </article> <hr> <article> <h3> CVE-2025-3978 - Dazhouda Lcms Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3978 <br> <strong>Published : </strong> April 27, 2025, 5:15 p.m. | 9 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/view/default/user_set.htm. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3978"> read more </a> </article> <hr> <article> <h3> CVE-2025-3964 - Withstars Books-Management-System Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3964 <br> <strong>Published : </strong> April 27, 2025, 9:15 a.m. | 11 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3964"> read more </a> </article> <hr> <article> <h3> CVE-2024-52887 - Shrew Soft VPN Bookmark Script Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-52887 <br> <strong>Published : </strong> April 27, 2025, 8:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52887"> read more </a> </article> <hr> <article> <h3> CVE-2024-52888 - Apache Struts Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2024-52888 <br> <strong>Published : </strong> April 27, 2025, 8:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52888"> read more </a> </article> <hr> <article> <h3> CVE-2025-3963 - Withstars Books-Management-System Background Interface Remote Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3963 <br> <strong>Published : </strong> April 27, 2025, 8:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3963"> read more </a> </article> <hr> <article> <h3> CVE-2025-3961 - Withstars Books-Management-System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3961 <br> <strong>Published : </strong> April 27, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3961"> read more </a> </article> <hr> <article> <h3> CVE-2025-3962 - Withstars Books-Management-System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3962 <br> <strong>Published : </strong> April 27, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3962"> read more </a> </article> <hr> <article> <h3> CVE-2025-3960 - Withstars Books-Management-System Background Interface Missing Authorization Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3960 <br> <strong>Published : </strong> April 27, 2025, 6:15 a.m. | 10 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3960"> read more </a> </article> <hr> <article> <h3> CVE-2025-3959 - "Withstars Books-Management-System Cross-Site Request Forgery Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3959 <br> <strong>Published : </strong> April 27, 2025, 5:15 a.m. | 11 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /reader_delete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3959"> read more </a> </article> <hr> <article> <h3> CVE-2025-3956 - Novel-Cloud SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3956 <br> <strong>Published : </strong> April 27, 2025, 4:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3956"> read more </a> </article> <hr> <article> <h3> CVE-2025-3957 - Opplus Springboot-Admin SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3957 <br> <strong>Published : </strong> April 27, 2025, 4:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown processing of the file \src\main\resources\mapper\sys\SysLogDao.xml. The manipulation of the argument order leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3957"> read more </a> </article> <hr> <article> <h3> CVE-2025-3958 - Withstars Books-Management-System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3958 <br> <strong>Published : </strong> April 27, 2025, 4:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /book_edit_do.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3958"> read more </a> </article> <hr> <article> <h3> CVE-2025-46580 - GoldenDB Database Information Disclosure and Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46580 <br> <strong>Published : </strong> April 27, 2025, 3:15 a.m. | 13 hours, 6 minutes ago <br> <strong>Description : </strong>There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46580"> read more </a> </article> <hr> <article> <h3> CVE-2025-46578 - GoldenDB Database SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46578 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 14 hours, 6 minutes ago <br> <strong>Description : </strong>There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46578"> read more </a> </article> <hr> <article> <h3> CVE-2025-46579 - GoldenDB DDE Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46579 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 14 hours, 6 minutes ago <br> <strong>Description : </strong>There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46579"> read more </a> </article> <hr> <article> <h3> CVE-2025-46574 - GoldenDB Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46574 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46574"> read more </a> </article> <hr> <article> <h3> CVE-2025-46575 - GoldenDB Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46575 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46575"> read more </a> </article> <hr> <article> <h3> CVE-2025-46576 - GoldenDB Database Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46576 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46576"> read more </a> </article> <hr> <article> <h3> CVE-2025-46577 - GoldenDB Database SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46577 <br> <strong>Published : </strong> April 27, 2025, 2:15 a.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46577"> read more </a> </article> <hr> <article> <h3> CVE-2025-3955 - "Codeprojects Patient Record Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3955 <br> <strong>Published : </strong> April 27, 2025, 1:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3955"> read more </a> </article> <hr> <article> <h3> CVE-2025-46672 - NASA CryptoLib Crypto Function Status Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46672 <br> <strong>Published : </strong> April 27, 2025, 1:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46672"> read more </a> </article> <hr> <article> <h3> CVE-2025-46673 - NASA CryptoLib SDLS Protocol Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46673 <br> <strong>Published : </strong> April 27, 2025, 1:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS). <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46673"> read more </a> </article> <hr> <article> <h3> CVE-2025-46674 - NASA CryptoLib Cryptographic Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46674 <br> <strong>Published : </strong> April 27, 2025, 1:15 a.m. | 9 hours, 5 minutes ago <br> <strong>Description : </strong>NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46674"> read more </a> </article> <hr> <article> <h3> CVE-2025-46675 - NASA CryptoLib Cryptographic Key State Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46675 <br> <strong>Published : </strong> April 27, 2025, 1:15 a.m. | 9 hours, 5 minutes ago <br> <strong>Description : </strong>In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 27 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46675"> read more </a> </article> <hr> <article> <h3> CVE-2025-3954 - ChurchCRM Referer Handler Server-Side Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3954 <br> <strong>Published : </strong> April 26, 2025, 10:15 p.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some unknown functionality of the component Referer Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3954"> read more </a> </article> <hr> <article> <h3> CVE-2025-46656 - Markdownify Headline Prefix Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46656 <br> <strong>Published : </strong> April 26, 2025, 10:15 p.m. | 12 hours, 6 minutes ago <br> <strong>Description : </strong>python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>. This causes memory consumption. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46656"> read more </a> </article> <hr> <article> <h3> CVE-2025-46653 - Formidable File Name Guessing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46653 <br> <strong>Published : </strong> April 26, 2025, 9:15 p.m. | 11 hours, 6 minutes ago <br> <strong>Description : </strong>Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." (Also, there is a scenario in which only the last two characters of a hexoid string need to be guessed, but this is not often relevant.) NOTE: this does not imply that, in a typical use case, attackers will be able to exploit any hexoid behavior to upload and execute their own content. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46653"> read more </a> </article> <hr> <article> <h3> CVE-2025-46654 - CodiMD through 2.2.0 has a CSP-based protection me </h3> <p> <strong>CVE ID : </strong>CVE-2025-46654 <br> <strong>Published : </strong> April 26, 2025, 9:15 p.m. | 11 hours, 6 minutes ago <br> <strong>Description : </strong>CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46654"> read more </a> </article> <hr> <article> <h3> CVE-2025-46655 - CodiMD AWS S3 SVG XSS Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46655 <br> <strong>Published : </strong> April 26, 2025, 9:15 p.m. | 11 hours, 6 minutes ago <br> <strong>Description : </strong>CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-origin file storage, such as AWS S3. NOTE: it can be considered a user error if AWS is employed for hosting untrusted JavaScript content, but the selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46655"> read more </a> </article> <hr> <article> <h3> CVE-2025-46652 - IZArc Mark-of-the-Web Bypass Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46652 <br> <strong>Published : </strong> April 26, 2025, 6:15 p.m. | 14 hours, 6 minutes ago <br> <strong>Description : </strong>In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46652"> read more </a> </article> <hr> <article> <h3> CVE-2024-53636 - Serosoft Academia Student Information System (SIS) EagleR File Upload Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53636 <br> <strong>Published : </strong> April 26, 2025, 3:15 p.m. | 11 hours, 5 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53636"> read more </a> </article> <hr> <article> <h3> CVE-2025-46646 - Ghostscript UTF-8 Encoding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46646 <br> <strong>Published : </strong> April 26, 2025, 3:15 p.m. | 11 hours, 5 minutes ago <br> <strong>Description : </strong>In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. <br> <strong>Severity:</strong> 4.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46646"> read more </a> </article> <hr> <article> <h3> CVE-2024-13812 - "Anps Theme Plugin WordPress Shortcode Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13812 <br> <strong>Published : </strong> April 26, 2025, 9:15 a.m. | 17 hours, 5 minutes ago <br> <strong>Description : </strong>The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13812"> read more </a> </article> <hr> <article> <h3> CVE-2025-2101 - Edumall WordPress Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2101 <br> <strong>Published : </strong> April 26, 2025, 9:15 a.m. | 17 hours, 5 minutes ago <br> <strong>Description : </strong>The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2101"> read more </a> </article> <hr> <article> <h3> CVE-2025-2850 - "GL.iNet Router Unauthorized Download Interface Processing Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2850 <br> <strong>Published : </strong> April 26, 2025, 8:15 a.m. | 18 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been rated as problematic. This issue affects some unknown processing of the component Download Interface. The manipulation leads to improper authorization. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2850"> read more </a> </article> <hr> <article> <h3> CVE-2025-2851 - GL.iNet RPC Handler Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-2851 <br> <strong>Published : </strong> April 26, 2025, 8:15 a.m. | 18 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2851"> read more </a> </article> <hr> <article> <h3> CVE-2025-2811 - "GL.iNet Router Regular Expression Complexity Inefficient Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2811 <br> <strong>Published : </strong> April 26, 2025, 7:15 a.m. | 19 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. It has been declared as problematic. This vulnerability affects unknown code of the component API. The manipulation leads to inefficient regular expression complexity. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2811"> read more </a> </article> <hr> <article> <h3> CVE-2025-1458 - Elementor Element Pack Addons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1458 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 6 minutes ago <br> <strong>Description : </strong>The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1458"> read more </a> </article> <hr> <article> <h3> CVE-2025-2105 - Jupiter X Core WordPress PHP Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2105 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' parameter of the 'raven_download_file' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file download action, and the ability to upload files is also present. Otherwise, this would be considered exploitable by Contributor-level users and above, because they could create the form needed to successfully exploit this. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2105"> read more </a> </article> <hr> <article> <h3> CVE-2025-2907 - WordPress Order Delivery Date Plugin Authentication Bypass and CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2907 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modify the default_user_role to administrator and users_can_register, allowing them to register as an administrator of the site for complete site takeover. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2907"> read more </a> </article> <hr> <article> <h3> CVE-2025-3491 - WordPress Add Custom Page Template PHP Code Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3491 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'acpt_validate_setting' function. This is due to insufficient sanitization of the 'template_name' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3491"> read more </a> </article> <hr> <article> <h3> CVE-2025-3906 - Eduzz WooCommerce Unauthorized Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3906 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wep_opcoes' function in all versions up to, and including, 1.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit the default registration role within the plugin's registration flow to Administrator, which allows any user to create an Administrator account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3906"> read more </a> </article> <hr> <article> <h3> CVE-2025-3914 - Airtable Aeropage Sync for WordPress Unauthenticated Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3914 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3914"> read more </a> </article> <hr> <article> <h3> CVE-2025-3915 - Airtable Aeropage Sync for WordPress Unauthorized Data Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3915 <br> <strong>Published : </strong> April 26, 2025, 6:15 a.m. | 20 hours, 5 minutes ago <br> <strong>Description : </strong>The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aeropageDeletePost' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3915"> read more </a> </article> <hr> <article> <h3> CVE-2024-13808 - Xpro Elementor Addons - Pro WordPress Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13808 <br> <strong>Published : </strong> April 26, 2025, 5:15 a.m. | 18 hours, 29 minutes ago <br> <strong>Description : </strong>The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13808"> read more </a> </article> <hr> <article> <h3> CVE-2025-2801 - WordPress Create Custom Forms Plugin Arbitrary Shortcode Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2801 <br> <strong>Published : </strong> April 26, 2025, 4:15 a.m. | 19 hours, 29 minutes ago <br> <strong>Description : </strong>The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 26 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2801"> read more </a> </article> <hr> <article> <h3> CVE-2025-32985 - NETSCOUT nGeniusONE Credential Hardcoding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32985 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32985"> read more </a> </article> <hr> <article> <h3> CVE-2025-32986 - NETSCOUT nGeniusONE Unauthenticated Sensitive File Access </h3> <p> <strong>CVE ID : </strong>CVE-2025-32986 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32986"> read more </a> </article> <hr> <article> <h3> CVE-2025-46333 - Z2D Stride Compositor Out-of-Bounds Write </h3> <p> <strong>CVE ID : </strong>CVE-2025-46333 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>z2d is a pure Zig 2D graphics library. In version 0.6.0, when writing from one surface to another using `z2d.compositor.StrideCompositor.run`, the source surface can be completely out-of-bounds on the x-axis (but not on the y-axis) by way of a negative offset. This results in an overflow of the value controlling the length of the stride. In non-safe optimization modes (consumers compiling with `ReleaseFast` or `ReleaseSmall`), this could potentially lead to invalid memory accesses or corruption. This issue is patched in version 0.6.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46333"> read more </a> </article> <hr> <article> <h3> CVE-2025-32979 - NETSCOUT nGeniusONE Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32979 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 16 hours, 27 minutes ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32979"> read more </a> </article> <hr> <article> <h3> CVE-2025-32980 - NETSCOUT nGeniusONE Privilege Escalation Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2025-32980 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 23 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 has a Weak Sudo Configuration. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32980"> read more </a> </article> <hr> <article> <h3> CVE-2025-32981 - NETSCOUT nGeniusONE Local File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-32981 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 23 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32981"> read more </a> </article> <hr> <article> <h3> CVE-2025-32982 - NETSCOUT nGeniusONE Broken Authorization Schema Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32982 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 23 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32982"> read more </a> </article> <hr> <article> <h3> CVE-2025-32983 - NETSCOUT nGeniusONE Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32983 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 23 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32983"> read more </a> </article> <hr> <article> <h3> CVE-2025-32984 - NETSCOUT nGeniusONE Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32984 <br> <strong>Published : </strong> April 25, 2025, 9:15 p.m. | 23 hours ago <br> <strong>Description : </strong>NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32984"> read more </a> </article> <hr> <article> <h3> CVE-2025-28128 - Mytel Telecom Online Account System Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-28128 <br> <strong>Published : </strong> April 25, 2025, 8:15 p.m. | 17 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a crafted request. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28128"> read more </a> </article> <hr> <article> <h3> CVE-2025-3935 - ScreenConnect ASP.NET ViewState Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3935 <br> <strong>Published : </strong> April 25, 2025, 7:15 p.m. | 18 hours, 27 minutes ago <br> <strong>Description : </strong>ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note that to obtain these machine keys, privileged system level access must be obtained. If these machine keys are compromised, attackers could create and send a malicious ViewState to the website, potentially leading to remote code execution on the server. The risk does not originate from a vulnerability introduced by ScreenConnect, but from platform level behavior. This had no direct impact to ScreenConnect Client. ScreenConnect 2025.4 patch disables ViewState and removes any dependency on it. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3935"> read more </a> </article> <hr> <article> <h3> CVE-2024-30152 - HCL SX Cryptographic Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-30152 <br> <strong>Published : </strong> April 25, 2025, 6:15 p.m. | 14 hours ago <br> <strong>Description : </strong>HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30152"> read more </a> </article> <hr> <article> <h3> CVE-2025-25775 - Codeastro Bus Ticket Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25775 <br> <strong>Published : </strong> April 25, 2025, 5:15 p.m. | 15 hours ago <br> <strong>Description : </strong>Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25775"> read more </a> </article> <hr> <article> <h3> CVE-2025-2070 - "FileZ XML Parsing Denial of Service" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2070 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 16 hours ago <br> <strong>Description : </strong>An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2070"> read more </a> </article> <hr> <article> <h3> CVE-2025-3928 - Commvault Web Server Remote Webshell Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-3928 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 16 hours ago <br> <strong>Description : </strong>Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3928"> read more </a> </article> <hr> <article> <h3> CVE-2021-32601 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2021-32601 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 14 hours, 2 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-32601"> read more </a> </article> <hr> <article> <h3> CVE-2024-56156 - Halo File Type Validation Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56156 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 14 hours, 2 minutes ago <br> <strong>Description : </strong>Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56156"> read more </a> </article> <hr> <article> <h3> CVE-2025-2068 - FileZ Open Redirect Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2068 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 14 hours, 2 minutes ago <br> <strong>Description : </strong>An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2068"> read more </a> </article> <hr> <article> <h3> CVE-2025-2069 - FileZ Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-2069 <br> <strong>Published : </strong> April 25, 2025, 4:15 p.m. | 14 hours, 2 minutes ago <br> <strong>Description : </strong>A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user. <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2069"> read more </a> </article> <hr> <article> <h3> CVE-2025-43862 - Dify APP Orchestration Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43862 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 15 hours, 2 minutes ago <br> <strong>Description : </strong>Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-admin users to make unauthorized access and changes on the APPSs. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can access Orchestration of the APPs. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43862"> read more </a> </article> <hr> <article> <h3> CVE-2025-46432 - JetBrains TeamCity Base64 Credentials Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46432 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 15 hours, 2 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46432"> read more </a> </article> <hr> <article> <h3> CVE-2025-46433 - JetBrains TeamCity Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46433 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 15 hours, 2 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46433"> read more </a> </article> <hr> <article> <h3> CVE-2025-46618 - JetBrains TeamCity Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46618 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 15 hours, 2 minutes ago <br> <strong>Description : </strong>In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46618"> read more </a> </article> <hr> <article> <h3> CVE-2025-3647 - Moodle Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3647 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 11 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3647"> read more </a> </article> <hr> <article> <h3> CVE-2025-43016 - JetBrains Rider Unvalidated Archive Unpacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43016 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 11 hours, 1 minute ago <br> <strong>Description : </strong>In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43016"> read more </a> </article> <hr> <article> <h3> CVE-2025-3625 - Moodle Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3625 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA). <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3625"> read more </a> </article> <hr> <article> <h3> CVE-2025-3627 - Moodle Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3627 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA). <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3627"> read more </a> </article> <hr> <article> <h3> CVE-2025-3628 - Moodle Anonymous Assignment De-Anonymization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3628 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 1 hour, 21 minutes ago <br> <strong>Description : </strong>A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3628"> read more </a> </article> <hr> <article> <h3> CVE-2025-3635 - Moodle CSRF Tour Duplicating Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3635 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3635"> read more </a> </article> <hr> <article> <h3> CVE-2025-3636 - Moodle RSS Feed Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3636 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3636"> read more </a> </article> <hr> <article> <h3> CVE-2025-3637 - Moodle CSRF Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3637 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3637"> read more </a> </article> <hr> <article> <h3> CVE-2025-3638 - Moodle CSRF in Brickfield Tool </h3> <p> <strong>CVE ID : </strong>CVE-2025-3638 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3638"> read more </a> </article> <hr> <article> <h3> CVE-2025-3640 - Moodle Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3640 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3640"> read more </a> </article> <hr> <article> <h3> CVE-2025-3641 - Moodle Dropbox Repository Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3641 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3641"> read more </a> </article> <hr> <article> <h3> CVE-2025-3642 - Moodle EQUELLA Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3642 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3642"> read more </a> </article> <hr> <article> <h3> CVE-2025-3643 - Moodle Reflected Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3643 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3643"> read more </a> </article> <hr> <article> <h3> CVE-2025-3644 - Moodle Course Section Deletion Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3644 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3644"> read more </a> </article> <hr> <article> <h3> CVE-2025-3645 - Moodle Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3645 <br> <strong>Published : </strong> April 25, 2025, 3:15 p.m. | 5 hours, 1 minute ago <br> <strong>Description : </strong>A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3645"> read more </a> </article> <hr> <article> <h3> CVE-2025-1565 - WordPress Mayosis Core Plugin Arbitrary File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1565 <br> <strong>Published : </strong> April 25, 2025, 10:15 a.m. | 4 hours, 20 minutes ago <br> <strong>Description : </strong>The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1565"> read more </a> </article> <hr> <article> <h3> CVE-2025-1279 - "WordPress BM Content Builder Unauthenticated Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1279 <br> <strong>Published : </strong> April 25, 2025, 9:15 a.m. | 5 hours, 20 minutes ago <br> <strong>Description : </strong>The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1279"> read more </a> </article> <hr> <article> <h3> CVE-2025-3870 - "1 Decembrie 1918 WordPress CSRF" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3870 <br> <strong>Published : </strong> April 25, 2025, 9:15 a.m. | 5 hours, 20 minutes ago <br> <strong>Description : </strong>The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012. This is due to missing or incorrect nonce validation on the 1-decembrie-1918/1-decembrie-1918.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3870"> read more </a> </article> <hr> <article> <h3> CVE-2025-46482 - MyThemeShop WP Quiz Stored Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46482 <br> <strong>Published : </strong> April 25, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz allows Stored XSS.This issue affects WP Quiz: from n/a through 2.0.10. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46482"> read more </a> </article> <hr> <article> <h3> CVE-2025-46535 - AlphaEfficiencyTeam Custom Login and Registration Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46535 <br> <strong>Published : </strong> April 25, 2025, 8:15 a.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46535"> read more </a> </article> <hr> <article> <h3> CVE-2025-2238 - Vikinger WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2238 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2238"> read more </a> </article> <hr> <article> <h3> CVE-2025-3743 - WooCommerce Upsell Funnel Builder Order Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3743 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>The Upsell Funnel Builder for WooCommerce plugin for WordPress is vulnerable to order manipulation in all versions up to, and including, 3.0.0. This is due to the plugin allowing the additional product ID and discount field to be manipulated prior to processing via the 'add_offer_in_cart' function. This makes it possible for unauthenticated attackers to arbitrarily update the product associated with any order bump, and arbitrarily update the discount applied to any order bump item, when adding it to the cart. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3743"> read more </a> </article> <hr> <article> <h3> CVE-2025-3866 - Google Plus One Social Share Button CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3866 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the google-plus-one-share-button page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3866"> read more </a> </article> <hr> <article> <h3> CVE-2025-3867 - WordPress Ajax Comment Form CST CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-3867 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation via the 'acform_cst_settings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3867"> read more </a> </article> <hr> <article> <h3> CVE-2025-3868 - WordPress Custom Admin-Bar Favorites Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3868 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3868"> read more </a> </article> <hr> <article> <h3> CVE-2025-46616 - Quantum StorNext Web GUI API RCE </h3> <p> <strong>CVE ID : </strong>CVE-2025-46616 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46616"> read more </a> </article> <hr> <article> <h3> CVE-2025-46617 - Quantum StorNext Web GUI API Unauthorized Configuration Access and Modification </h3> <p> <strong>CVE ID : </strong>CVE-2025-46617 <br> <strong>Published : </strong> April 25, 2025, 7:15 a.m. | 7 hours, 20 minutes ago <br> <strong>Description : </strong>Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46617"> read more </a> </article> <hr> <article> <h3> CVE-2025-3511 - Mitsubishi Electric Corporation CC-Link IE TSN Denial of Service Remote Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3511 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 8 hours, 20 minutes ago <br> <strong>Description : </strong>Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3511"> read more </a> </article> <hr> <article> <h3> CVE-2025-3861 - WordPress Prevent Direct Access Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3861 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 8 hours, 20 minutes ago <br> <strong>Description : </strong>The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3861"> read more </a> </article> <hr> <article> <h3> CVE-2025-3923 - WordPress Prevent Direct Access - Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3923 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 8 hours, 20 minutes ago <br> <strong>Description : </strong>The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'generate_unique_string' due to insufficient randomness of the generated file name. This makes it possible for unauthenticated attackers to extract sensitive data including files protected by the plugin if the attacker can determine the file name. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3923"> read more </a> </article> <hr> <article> <h3> CVE-2025-46613 - OpenPLC Server Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-46613 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 8 hours, 20 minutes ago <br> <strong>Description : </strong>OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46613"> read more </a> </article> <hr> <article> <h3> CVE-2025-0671 - Icegram Express WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0671 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0671"> read more </a> </article> <hr> <article> <h3> CVE-2025-2580 - Bit Form WordPress Contact Form Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2580 <br> <strong>Published : </strong> April 25, 2025, 6:15 a.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2580"> read more </a> </article> <hr> <article> <h3> CVE-2025-3752 - Able Player WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3752 <br> <strong>Published : </strong> April 25, 2025, 5:15 a.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>The Able Player, accessible HTML5 media player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘preload’ parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3752"> read more </a> </article> <hr> <article> <h3> CVE-2025-3775 - ShopLentor WooCommerce Builder SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3775 <br> <strong>Published : </strong> April 25, 2025, 5:15 a.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3775"> read more </a> </article> <hr> <article> <h3> CVE-2025-46599 - K3s Kubernetes Kubelet ReadWritePort Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46599 <br> <strong>Published : </strong> April 25, 2025, 5:15 a.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46599"> read more </a> </article> <hr> <article> <h3> CVE-2025-46545 - Sherpa Orchestrator Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46545 <br> <strong>Published : </strong> April 25, 2025, 3:15 a.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46545"> read more </a> </article> <hr> <article> <h3> CVE-2025-46546 - Sherpa Orchestrator Blind SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46546 <br> <strong>Published : </strong> April 25, 2025, 3:15 a.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46546"> read more </a> </article> <hr> <article> <h3> CVE-2025-46547 - Sherpa Orchestrator Cross-Site Request Forgery (XSS, SQL Injection) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46547 <br> <strong>Published : </strong> April 25, 2025, 3:15 a.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46547"> read more </a> </article> <hr> <article> <h3> CVE-2025-46595 - Backdrop CMS Flag Module Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46595 <br> <strong>Published : </strong> April 25, 2025, 3:15 a.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of entity. It doesn't verify flag links before performing the flag action, or verify that the response returned was provided by the flag module. This can allow crafted HTML to result in Cross Site Scripting. This is mitigated by the fact that an attacker must have a role with permission to create links on the website, for example: create or edit comments or content with a filtered text format. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46595"> read more </a> </article> <hr> <article> <h3> CVE-2025-46544 - Sherpa Orchestrator Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46544 <br> <strong>Published : </strong> April 25, 2025, 3:15 a.m. | 2 hours, 59 minutes ago <br> <strong>Description : </strong>In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46544"> read more </a> </article> <hr> <article> <h3> CVE-2025-43864 - React Router Cache Poisoning Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43864 <br> <strong>Published : </strong> April 25, 2025, 1:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43864"> read more </a> </article> <hr> <article> <h3> CVE-2025-43865 - React Router HTTP Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43865 <br> <strong>Published : </strong> April 25, 2025, 1:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values of the data object passed to the HTML. This issue has been patched in version 7.5.2. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43865"> read more </a> </article> <hr> <article> <h3> CVE-2025-2185 - ALBEDO Telecom Net.Time PTP/NTP Clock Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2185 <br> <strong>Published : </strong> April 25, 2025, 12:15 a.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2185"> read more </a> </article> <hr> <article> <h3> CVE-2025-3606 - Vestel AC Charger Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3606 <br> <strong>Published : </strong> April 25, 2025, 12:15 a.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 25 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3606"> read more </a> </article> <hr> <article> <h3> CVE-2025-1294 - "eForm for WordPress Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1294 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1294"> read more </a> </article> <hr> <article> <h3> CVE-2025-3749 - Breeze Display for WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3749 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cal_size’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3749"> read more </a> </article> <hr> <article> <h3> CVE-2025-46271 - UNI-NMS-Lite Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46271 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46271"> read more </a> </article> <hr> <article> <h3> CVE-2025-46272 - D-Link Router Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46272 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46272"> read more </a> </article> <hr> <article> <h3> CVE-2025-46273 - UNI-NMS-Lite Hard-Coded Credentials Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46273 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46273"> read more </a> </article> <hr> <article> <h3> CVE-2025-46274 - UNI-NMS-Lite Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46274 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46274"> read more </a> </article> <hr> <article> <h3> CVE-2025-46275 - Fortinet FortiSwitch Unauthenticated Administrator Account Creation </h3> <p> <strong>CVE ID : </strong>CVE-2025-46275 <br> <strong>Published : </strong> April 24, 2025, 11:15 p.m. | 6 hours, 59 minutes ago <br> <strong>Description : </strong>WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46275"> read more </a> </article> <hr> <article> <h3> CVE-2022-44760 - HCL Leap JavaScript Injection </h3> <p> <strong>CVE ID : </strong>CVE-2022-44760 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44760"> read more </a> </article> <hr> <article> <h3> CVE-2023-37516 - HCL Leap Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2023-37516 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Missing "no cache" headers in HCL Leap permits user directory information to be cached. <br> <strong>Severity:</strong> 3.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-37516"> read more </a> </article> <hr> <article> <h3> CVE-2024-30127 - HCL Leap HTTP Cache Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-30127 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Missing "no cache" headers in HCL Leap permits sensitive data to be cached. <br> <strong>Severity:</strong> 3.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30127"> read more </a> </article> <hr> <article> <h3> CVE-2025-25777 - Codeastro Bus Ticket Booking System IDOR </h3> <p> <strong>CVE ID : </strong>CVE-2025-25777 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25777"> read more </a> </article> <hr> <article> <h3> CVE-2025-29529 - ITC Systems Multiplan/Matrix OneCard SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-29529 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29529"> read more </a> </article> <hr> <article> <h3> CVE-2025-43861 - ManageWiki Stored and Reflected XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43861 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes" dialog, the payload will be rendered and executed in the context of their own session. This issue has been patched in commit 2f177dc. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43861"> read more </a> </article> <hr> <article> <h3> CVE-2022-44759 - HCL Leap SVG Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-44759 <br> <strong>Published : </strong> April 24, 2025, 9:15 p.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-44759"> read more </a> </article> <hr> <article> <h3> CVE-2025-26382 - iSTAR ICU Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-26382 <br> <strong>Published : </strong> April 24, 2025, 8:15 p.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26382"> read more </a> </article> <hr> <article> <h3> CVE-2025-43859 - Apache h11 Chunked-Coding Request Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43859 <br> <strong>Published : </strong> April 24, 2025, 7:15 p.m. | 6 hours, 58 minutes ago <br> <strong>Description : </strong>h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43859"> read more </a> </article> <hr> <article> <h3> CVE-2025-43858 - YouTubeDLSharp Windows Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43858 <br> <strong>Published : </strong> April 24, 2025, 6:15 p.m. | 7 hours, 59 minutes ago <br> <strong>Description : </strong>YoutubeDLSharp is a wrapper for the command-line video downloaders youtube-dl and yt-dlp. In versions starting from 1.0.0-beta4 and prior to 1.1.2, an unsafe conversion of arguments allows the injection of a malicious commands when starting `yt-dlp` from a commands prompt running on Windows OS with the `UseWindowsEncodingWorkaround` value defined to true (default behavior). If a user is using built-in methods from the YoutubeDL.cs file, the value is true by default and a user cannot disable it from these methods. This issue has been patched in version 1.1.2. <br> <strong>Severity:</strong> 9.2 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43858"> read more </a> </article> <hr> <article> <h3> CVE-2024-30113 - HCL Leap Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-30113 <br> <strong>Published : </strong> April 24, 2025, 5:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30113"> read more </a> </article> <hr> <article> <h3> CVE-2024-30114 - HCL Leap Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-30114 <br> <strong>Published : </strong> April 24, 2025, 5:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30114"> read more </a> </article> <hr> <article> <h3> CVE-2024-30147 - "Oracle HCL Leap Client-Side Script Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-30147 <br> <strong>Published : </strong> April 24, 2025, 5:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-30147"> read more </a> </article> <hr> <article> <h3> CVE-2025-31324 - SAP NetWeaver Unauthenticated Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-31324 <br> <strong>Published : </strong> April 24, 2025, 5:15 p.m. | 8 hours, 59 minutes ago <br> <strong>Description : </strong>SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31324"> read more </a> </article> <hr> <article> <h3> CVE-2021-47662 - F5 Networks HTTPS DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2021-47662 <br> <strong>Published : </strong> April 24, 2025, 10:15 a.m. | 1 hour, 59 minutes ago <br> <strong>Description : </strong>Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-47662"> read more </a> </article> <hr> <article> <h3> CVE-2021-47663 - Apache Solr JSON Web Tokens Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2021-47663 <br> <strong>Published : </strong> April 24, 2025, 10:15 a.m. | 1 hour, 59 minutes ago <br> <strong>Description : </strong>Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-47663"> read more </a> </article> <hr> <article> <h3> CVE-2021-47664 - Cisco Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2021-47664 <br> <strong>Published : </strong> April 24, 2025, 10:15 a.m. | 1 hour, 59 minutes ago <br> <strong>Description : </strong>Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-47664"> read more </a> </article> <hr> <article> <h3> CVE-2025-3872 - Centreon centreon-web SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3872 <br> <strong>Published : </strong> April 24, 2025, 10:15 a.m. | 1 hour, 59 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection. A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload. This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3872"> read more </a> </article> <hr> <article> <h3> CVE-2024-13307 - Reales WP Real Estate WordPress Theme Unauthenticated File Deletion and Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13307 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'reales_delete_file', 'reales_delete_file_plans', 'reales_add_to_favourites', and 'reales_remove_from_favourites' functions in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to delete arbitrary attachments, and add or remove favorite property listings for any user. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13307"> read more </a> </article> <hr> <article> <h3> CVE-2025-1284 - Woocommerce Automatic Order Printing Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-1284 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1 via the xc_woo_printer_preview AJAX action due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's invoices and orders which can contain sensitive information. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1284"> read more </a> </article> <hr> <article> <h3> CVE-2025-2543 - WordPress Advanced Accordion Gutenberg Block Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2543 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2543"> read more </a> </article> <hr> <article> <h3> CVE-2025-2579 - Lottie Player WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2579 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Lottie Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the uploaded file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2579"> read more </a> </article> <hr> <article> <h3> CVE-2025-3058 - Xelion Webchat WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3058 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3058"> read more </a> </article> <hr> <article> <h3> CVE-2025-3065 - Apache Database Toolset Remote File Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3065 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3065"> read more </a> </article> <hr> <article> <h3> CVE-2025-3101 - WordPress Configurator Theme Core Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3101 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3101"> read more </a> </article> <hr> <article> <h3> CVE-2025-3280 - ELEX WooCommerce Advanced Bulk Edit Products, Prices Attributes SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3280 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value_filter' parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3280"> read more </a> </article> <hr> <article> <h3> CVE-2025-3300 - "WordPress WPMasterToolKit Directory Traversal Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3300 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The WPMasterToolKit (WPMTK) – All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and modify the contents of arbitrary files on the server, which can contain sensitive information. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3300"> read more </a> </article> <hr> <article> <h3> CVE-2025-3603 - Flynax Bridge for WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3603 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3603"> read more </a> </article> <hr> <article> <h3> CVE-2025-3604 - Flynax Bridge WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3604 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3604"> read more </a> </article> <hr> <article> <h3> CVE-2025-3607 - WordPress Frontend Login and Registration Blocks Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3607 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.7. This is due to the plugin not properly validating a user's identity prior to updating a password. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3607"> read more </a> </article> <hr> <article> <h3> CVE-2025-3776 - WordPress TargetSMS Plugin Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3776 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for unauthenticated attackers to execute any callable function on the site, such as phpinfo(). <br> <strong>Severity:</strong> 8.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3776"> read more </a> </article> <hr> <article> <h3> CVE-2025-3793 - Buddypress WordPress Force Password Change Plugin Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3793 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force_password_ajax' function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with subscriber-level access and above and under certain prerequisites, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their accounts. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3793"> read more </a> </article> <hr> <article> <h3> CVE-2025-3832 - "FuseDesk WordPress Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3832 <br> <strong>Published : </strong> April 24, 2025, 9:15 a.m. | 2 hours, 58 minutes ago <br> <strong>Description : </strong>The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘successredirect’ parameter in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3832"> read more </a> </article> <hr> <article> <h3> CVE-2024-12244 - GitLab EE Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-12244 <br> <strong>Published : </strong> April 24, 2025, 8:15 a.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12244"> read more </a> </article> <hr> <article> <h3> CVE-2025-0639 - GitLab CE/EE Service Availability Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-0639 <br> <strong>Published : </strong> April 24, 2025, 8:15 a.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0639"> read more </a> </article> <hr> <article> <h3> CVE-2025-1908 - GitLab Information Disclosure and Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1908 <br> <strong>Published : </strong> April 24, 2025, 8:15 a.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1. <br> <strong>Severity:</strong> 7.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1908"> read more </a> </article> <hr> <article> <h3> CVE-2025-3761 - My Tickets - WordPress Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3761 <br> <strong>Published : </strong> April 24, 2025, 7:15 a.m. | 4 hours, 58 minutes ago <br> <strong>Description : </strong>The My Tickets – Accessible Event Ticketing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.16. This is due to the mt_save_profile() function not appropriately restricting access to unauthorized users to update roles. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3761"> read more </a> </article> <hr> <article> <h3> CVE-2025-41395 - Mattermost Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-41395 <br> <strong>Published : </strong> April 24, 2025, 7:15 a.m. | 4 hours, 58 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate the props used by the RetrospectivePost custom post type in the Playbooks plugin, which allows an attacker to create a specially crafted post with maliciously crafted props and cause a denial of service (DoS) of the web app for all users. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41395"> read more </a> </article> <hr> <article> <h3> CVE-2025-41423 - Mattermost Playbooks API Permission Validation Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-41423 <br> <strong>Published : </strong> April 24, 2025, 7:15 a.m. | 4 hours, 58 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts containing actions created by the Playbooks bot, even without channel access or appropriate permissions. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-41423"> read more </a> </article> <hr> <article> <h3> CVE-2025-32730 - i-PRO Co., Ltd. Surveillance Cameras and Recorders Cryptographic Key Hard-Coded Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-32730 <br> <strong>Published : </strong> April 24, 2025, 7:15 a.m. | 56 minutes ago <br> <strong>Description : </strong>Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co., Ltd. surveillance cameras and recorders. This vulnerability allows a local authenticated attacker to use the authentication information from the last connected surveillance cameras and recorders. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32730"> read more </a> </article> <hr> <article> <h3> CVE-2025-35965 - Mattermost Denial-of-Service DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-35965 <br> <strong>Published : </strong> April 24, 2025, 7:15 a.m. | 56 minutes ago <br> <strong>Description : </strong>Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific posts, overloading the server and leading to a denial-of-service (DoS) condition. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-35965"> read more </a> </article> <hr> <article> <h3> CVE-2025-1453 - WordPress Category Posts Widget Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1453 <br> <strong>Published : </strong> April 24, 2025, 6:15 a.m. | 1 hour, 56 minutes ago <br> <strong>Description : </strong>The Category Posts Widget WordPress plugin before 4.9.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1453"> read more </a> </article> <hr> <article> <h3> CVE-2025-2558 - "WordPress Theme-Wound LFI Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2558 <br> <strong>Published : </strong> April 24, 2025, 6:15 a.m. | 1 hour, 56 minutes ago <br> <strong>Description : </strong>The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2558"> read more </a> </article> <hr> <article> <h3> CVE-2025-3435 - Mang Board WP Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3435 <br> <strong>Published : </strong> April 24, 2025, 4:15 a.m. | 3 hours, 56 minutes ago <br> <strong>Description : </strong>The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3435"> read more </a> </article> <hr> <article> <h3> CVE-2025-1976 - Brocade Fabric OS Root Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-1976 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1976"> read more </a> </article> <hr> <article> <h3> CVE-2025-46374 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-46374 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46374"> read more </a> </article> <hr> <article> <h3> CVE-2025-46375 - Apache Struts Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46375 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46375"> read more </a> </article> <hr> <article> <h3> CVE-2025-46376 - Cisco Webex Meeting Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46376 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46376"> read more </a> </article> <hr> <article> <h3> CVE-2025-46377 - Apache HTTP Server Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46377 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46377"> read more </a> </article> <hr> <article> <h3> CVE-2025-46378 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-46378 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46378"> read more </a> </article> <hr> <article> <h3> CVE-2025-46379 - Apache Web Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-46379 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46379"> read more </a> </article> <hr> <article> <h3> CVE-2025-46380 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-46380 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46380"> read more </a> </article> <hr> <article> <h3> CVE-2025-46381 - Apache HTTP Server Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46381 <br> <strong>Published : </strong> April 24, 2025, 3:15 a.m. | 4 hours, 57 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46381"> read more </a> </article> <hr> <article> <h3> CVE-2025-46417 - Apache Picklescan SSL Exfiltration Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46417 <br> <strong>Published : </strong> April 24, 2025, 1:15 a.m. | 6 hours, 56 minutes ago <br> <strong>Description : </strong>The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46417"> read more </a> </article> <hr> <article> <h3> CVE-2025-46419 - Westermo WeOS Reboot Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46419 <br> <strong>Published : </strong> April 24, 2025, 1:15 a.m. | 6 hours, 56 minutes ago <br> <strong>Description : </strong>Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46419"> read more </a> </article> <hr> <article> <h3> CVE-2025-27580 - NIH BRICS Privilege Escalation and Account Compromise Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27580 <br> <strong>Published : </strong> April 24, 2025, 12:15 a.m. | 7 hours, 57 minutes ago <br> <strong>Description : </strong>NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27580"> read more </a> </article> <hr> <article> <h3> CVE-2025-27581 - NIH BRICS Unauthenticated Access to InET Module </h3> <p> <strong>CVE ID : </strong>CVE-2025-27581 <br> <strong>Published : </strong> April 24, 2025, 12:15 a.m. | 7 hours, 57 minutes ago <br> <strong>Description : </strong>NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 24 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27581"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Carrefour Mobile </h3> <p>numéro de téléphone, adresse email, mot de passe, adresse, numéro de passeport</p> <p class="feed-time"> Thu Apr 24 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Carrefour Mobile-2025-04-24"> read more </a> </article> <hr> <article> <h3> CVE-2024-22351 - IBM InfoSphere Information Server Authentication Session Impersonation </h3> <p> <strong>CVE ID : </strong>CVE-2024-22351 <br> <strong>Published : </strong> April 23, 2025, 11:15 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-22351"> read more </a> </article> <hr> <article> <h3> CVE-2025-25045 - IBM InfoSphere Information Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25045 <br> <strong>Published : </strong> April 23, 2025, 11:15 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25045"> read more </a> </article> <hr> <article> <h3> CVE-2025-25046 - IBM InfoSphere Information Server DataStage Flow Designer Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25046 <br> <strong>Published : </strong> April 23, 2025, 11:15 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25046"> read more </a> </article> <hr> <article> <h3> CVE-2025-46400 - Fig2dev ArcObject Segmentation Fault Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46400 <br> <strong>Published : </strong> April 23, 2025, 9:15 p.m. | 10 hours, 57 minutes ago <br> <strong>Description : </strong>Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via read_arcobject function. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46400"> read more </a> </article> <hr> <article> <h3> CVE-2025-46397 - "Fig2Dev Bezier Spline Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-46397 <br> <strong>Published : </strong> April 23, 2025, 9:15 p.m. | 8 hours, 22 minutes ago <br> <strong>Description : </strong>Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46397"> read more </a> </article> <hr> <article> <h3> CVE-2025-46398 - Fig2Dev Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46398 <br> <strong>Published : </strong> April 23, 2025, 9:15 p.m. | 8 hours, 22 minutes ago <br> <strong>Description : </strong>Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via read_objects function. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46398"> read more </a> </article> <hr> <article> <h3> CVE-2025-46399 - Fig2Dev Genge Itp Spline Segmentation Fault </h3> <p> <strong>CVE ID : </strong>CVE-2025-46399 <br> <strong>Published : </strong> April 23, 2025, 9:15 p.m. | 8 hours, 22 minutes ago <br> <strong>Description : </strong>Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via genge_itp_spline function. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46399"> read more </a> </article> <hr> <article> <h3> CVE-2025-28169 - BYD QIN PLUS DM-i Dilink OS Unencrypted Broadcast Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28169 <br> <strong>Published : </strong> April 23, 2025, 8:15 p.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28169"> read more </a> </article> <hr> <article> <h3> CVE-2025-32818 - SonicWall SonicOS SSLVPN Null Pointer Dereference DoS </h3> <p> <strong>CVE ID : </strong>CVE-2025-32818 <br> <strong>Published : </strong> April 23, 2025, 8:15 p.m. | 9 hours, 21 minutes ago <br> <strong>Description : </strong>A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32818"> read more </a> </article> <hr> <article> <h3> CVE-2025-3673 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3673 <br> <strong>Published : </strong> April 23, 2025, 7:16 p.m. | 10 hours, 20 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3092.. Reason: This candidate is a reservation duplicate of CVE-2023-3092. Notes: All CVE users should reference CVE-2023-3092. instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 19:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3673"> read more </a> </article> <hr> <article> <h3> CVE-2024-58251 - BusyBox Netstat Terminal Escape Sequence Injection Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-58251 <br> <strong>Published : </strong> April 23, 2025, 6:16 p.m. | 11 hours, 21 minutes ago <br> <strong>Description : </strong>In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58251"> read more </a> </article> <hr> <article> <h3> CVE-2025-2770 - BEC Technologies Router Cleartext Password Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2770 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2770"> read more </a> </article> <hr> <article> <h3> CVE-2025-2771 - BEC Technologies Router Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2771 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2771"> read more </a> </article> <hr> <article> <h3> CVE-2025-2772 - BEC Technologies Router Credentials Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2772 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2772"> read more </a> </article> <hr> <article> <h3> CVE-2025-2773 - BEC Technologies Multiple Routers TCP Port 22 Command Injection Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2773 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the management interface, which listens on TCP port 22 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-25903. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2773"> read more </a> </article> <hr> <article> <h3> CVE-2025-3900 - "Drupal Colorbox Cross-Site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3900 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3900"> read more </a> </article> <hr> <article> <h3> CVE-2025-3901 - Drupal Bootstrap Site Alert Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3901 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3901"> read more </a> </article> <hr> <article> <h3> CVE-2025-3902 - Drupal Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3902 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects Block Class: from 4.0.0 before 4.0.1. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3902"> read more </a> </article> <hr> <article> <h3> CVE-2025-3903 - Drupal UEditor - 百度编辑器 File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3903 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3903"> read more </a> </article> <hr> <article> <h3> CVE-2025-3904 - "Drupal Sportsleague Authentication Bypass" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3904 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3904"> read more </a> </article> <hr> <article> <h3> CVE-2025-3907 - Drupal Search API Solr CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-3907 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 8 hours, 57 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3907"> read more </a> </article> <hr> <article> <h3> CVE-2025-2765 - CarlinKit CPC200-CCPA Hard-Coded Credentials Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2765 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the wireless hotspot. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-24349. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2765"> read more </a> </article> <hr> <article> <h3> CVE-2025-2767 - Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-2767 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the processing of the User-Agent HTTP header. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24407. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2767"> read more </a> </article> <hr> <article> <h3> CVE-2025-2768 - Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-2768 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2768"> read more </a> </article> <hr> <article> <h3> CVE-2025-2769 - Bdrive NetDrive OpenSSL Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2769 <br> <strong>Published : </strong> April 23, 2025, 5:16 p.m. | 6 hours, 20 minutes ago <br> <strong>Description : </strong>Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2769"> read more </a> </article> <hr> <article> <h3> CVE-2024-47829 - "Pnpm MD5 Path Shortening Collision Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-47829 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>pnpm is a package manager. Prior to version 10.0.0, the path shortening function uses the md5 function as a path shortening compression function, and if a collision occurs, it will result in the same storage path for two different libraries. Although the real names are under the package name /node_modoules/, there are no version numbers for the libraries they refer to. This issue has been patched in version 10.0.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-47829"> read more </a> </article> <hr> <article> <h3> CVE-2025-21605 - Redis Unauthenticated Output Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21605 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21605"> read more </a> </article> <hr> <article> <h3> CVE-2025-32966 - DataEase Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32966 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32966"> read more </a> </article> <hr> <article> <h3> CVE-2025-32968 - XWiki Blind SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32968 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it is possible for a user with SCRIPT right to escape from the HQL execution context and perform a blind SQL injection to execute arbitrary SQL statements on the database backend. Depending on the used database backend, the attacker may be able to not only obtain confidential information such as password hashes from the database, but also execute UPDATE/INSERT/DELETE queries. This issue has been patched in versions 16.10.1, 16.4.6 and 15.10.16. There is no known workaround, other than upgrading XWiki. The protection added to this REST API is the same as the one used to validate complete select queries, making it more consistent. However, while the script API always had this protection for complete queries, it's important to note that it's a very strict protection and some valid, but complex, queries might suddenly require the author to have programming right. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32968"> read more </a> </article> <hr> <article> <h3> CVE-2025-32969 - XWiki Blind SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32969 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>XWiki is a generic wiki platform. In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote unauthenticated user to escape from the HQL execution context and perform a blind SQL injection to execute arbitrary SQL statements on the database backend, including when "Prevent unregistered users from viewing pages, regardless of the page rights" and "Prevent unregistered users from editing pages, regardless of the page rights" options are enabled. Depending on the used database backend, the attacker may be able to not only obtain confidential information such as password hashes from the database, but also execute UPDATE/INSERT/DELETE queries. This issue has been patched in versions 16.10.1, 16.4.6 and 15.10.16. There is no known workaround, other than upgrading XWiki. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32969"> read more </a> </article> <hr> <article> <h3> CVE-2025-45429 - Tenda ac9 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45429 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45429"> read more </a> </article> <hr> <article> <h3> CVE-2025-46394 - BusyBox Tar Terminal Escape Sequence File Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46394 <br> <strong>Published : </strong> April 23, 2025, 4:15 p.m. | 46 minutes ago <br> <strong>Description : </strong>In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. <br> <strong>Severity:</strong> 3.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46394"> read more </a> </article> <hr> <article> <h3> CVE-2025-43965 - ImageMagick MIFF Image Depth Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-43965 <br> <strong>Published : </strong> April 23, 2025, 3:16 p.m. | 1 hour, 45 minutes ago <br> <strong>Description : </strong>In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43965"> read more </a> </article> <hr> <article> <h3> CVE-2025-45427 - Tenda AC9 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45427 <br> <strong>Published : </strong> April 23, 2025, 3:16 p.m. | 1 hour, 45 minutes ago <br> <strong>Description : </strong>In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45427"> read more </a> </article> <hr> <article> <h3> CVE-2025-45428 - Tenda AC9 Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-45428 <br> <strong>Published : </strong> April 23, 2025, 3:16 p.m. | 1 hour, 45 minutes ago <br> <strong>Description : </strong>In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-45428"> read more </a> </article> <hr> <article> <h3> CVE-2025-46393 - ImageMagick Multispectral Packet Size Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-46393 <br> <strong>Published : </strong> April 23, 2025, 3:16 p.m. | 1 hour, 45 minutes ago <br> <strong>Description : </strong>In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order). <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46393"> read more </a> </article> <hr> <article> <h3> CVE-2025-43716 - Ivanti LANDesk Management Gateway Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43716 <br> <strong>Published : </strong> April 23, 2025, 2:15 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as /client/index.php%3F.php/gsb/firewall.php within the management web panel, potentially exposing sensitive device information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43716"> read more </a> </article> <hr> <article> <h3> CVE-2025-2703 - "Jira XY Chart Plugin DOM XSS" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2703 <br> <strong>Published : </strong> April 23, 2025, 12:15 p.m. | 4 hours, 46 minutes ago <br> <strong>Description : </strong>The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2703"> read more </a> </article> <hr> <article> <h3> CVE-2025-42600 - Meon KYC Brute Force OTP Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42600 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to gain unauthorized access to other user accounts. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42600"> read more </a> </article> <hr> <article> <h3> CVE-2025-42601 - Meon KYC Captcha Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42601 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter leading to bypassing the Captcha verification mechanism. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42601"> read more </a> </article> <hr> <article> <h3> CVE-2025-42602 - Meon KYC Token Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42602 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through API request body leading to unauthorized access of other user accounts. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42602"> read more </a> </article> <hr> <article> <h3> CVE-2025-42603 - Meon KYC Plain Text Data Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-42603 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that contains unencrypted sensitive information belonging to other users. Successful exploitation of this vulnerability could allow remote attacker to impersonate the target user and gain unauthorized access to the user account. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42603"> read more </a> </article> <hr> <article> <h3> CVE-2025-42604 - Meon KYC Debug Mode Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42604 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42604"> read more </a> </article> <hr> <article> <h3> CVE-2025-42605 - Meon Bidding Solutions Remote Authorization Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-42605 <br> <strong>Published : </strong> April 23, 2025, 11:15 a.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body to gain unauthorized access to other user accounts. Successful exploitation of this vulnerability could allow remote attacker to perform authorized manipulation of data associated with other user accounts. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-42605"> read more </a> </article> <hr> <article> <h3> CVE-2024-10306 - Apache mod_proxy_cluster Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-10306 <br> <strong>Published : </strong> April 23, 2025, 10:15 a.m. | 6 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with access to the host might send MCMP requests that may result in adding/removing/updating nodes for the balancing. However, this host should not be accessible to the public network as it does not serve the general traffic. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-10306"> read more </a> </article> <hr> <article> <h3> CVE-2025-1054 - UiCore Elements - WordPress Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-1054 <br> <strong>Published : </strong> April 23, 2025, 10:15 a.m. | 6 hours, 46 minutes ago <br> <strong>Description : </strong>The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the UI Counter, UI Icon Box, UI Testimonial Slider, UI Testimonial Grid, and UI Testimonial Carousel widgets in all versions up to, and including, 1.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1054"> read more </a> </article> <hr> <article> <h3> CVE-2025-2595 - CODESYS Visualization Forced Browsing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2595 <br> <strong>Published : </strong> April 23, 2025, 8:15 a.m. | 8 hours, 46 minutes ago <br> <strong>Description : </strong>An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2595"> read more </a> </article> <hr> <article> <h3> CVE-2025-3529 - WordPress Simple Shopping Cart Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-3529 <br> <strong>Published : </strong> April 23, 2025, 8:15 a.m. | 8 hours, 46 minutes ago <br> <strong>Description : </strong>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital product without paying for it. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3529"> read more </a> </article> <hr> <article> <h3> CVE-2025-3530 - WordPress Simple Shopping Cart Price Tampering Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3530 <br> <strong>Published : </strong> April 23, 2025, 8:15 a.m. | 8 hours, 46 minutes ago <br> <strong>Description : </strong>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3530"> read more </a> </article> <hr> <article> <h3> CVE-2025-0618 - FireEye EDR Agent Persistent Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0618 <br> <strong>Published : </strong> April 23, 2025, 7:15 a.m. | 9 hours, 46 minutes ago <br> <strong>Description : </strong>A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0618"> read more </a> </article> <hr> <article> <h3> CVE-2025-0926 - Axis Camera Station Pro File Deletion Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0926 <br> <strong>Published : </strong> April 23, 2025, 6:15 a.m. | 7 hours, 47 minutes ago <br> <strong>Description : </strong>Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0926"> read more </a> </article> <hr> <article> <h3> CVE-2025-1056 - Axis Camera Station Pro File Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1056 <br> <strong>Published : </strong> April 23, 2025, 6:15 a.m. | 7 hours, 47 minutes ago <br> <strong>Description : </strong>Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1056"> read more </a> </article> <hr> <article> <h3> CVE-2025-1021 - Synology DiskStation Manager (DSM) File Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-1021 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1021"> read more </a> </article> <hr> <article> <h3> CVE-2025-46216 - Apache HTTP Server HTTP Request Smuggling </h3> <p> <strong>CVE ID : </strong>CVE-2025-46216 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46216"> read more </a> </article> <hr> <article> <h3> CVE-2025-46217 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-46217 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46217"> read more </a> </article> <hr> <article> <h3> CVE-2025-46218 - Microsoft Azure AD Authentication </h3> <p> <strong>CVE ID : </strong>CVE-2025-46218 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46218"> read more </a> </article> <hr> <article> <h3> CVE-2025-46219 - Apache HTTP Server Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46219 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46219"> read more </a> </article> <hr> <article> <h3> CVE-2025-46220 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-46220 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46220"> read more </a> </article> <hr> <article> <h3> CVE-2025-46221 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46221 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46221"> read more </a> </article> <hr> <article> <h3> CVE-2025-46222 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46222 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46222"> read more </a> </article> <hr> <article> <h3> CVE-2025-46223 - Apache HTTP Server Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-46223 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46223"> read more </a> </article> <hr> <article> <h3> CVE-2025-46224 - Dropbox Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-46224 <br> <strong>Published : </strong> April 23, 2025, 3:15 a.m. | 10 hours, 47 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 23 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46224"> read more </a> </article> <hr> <article> <h3> CVE-2025-3441 - CVE-2022-1234: Adobe Flash Type Confusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3441 <br> <strong>Published : </strong> April 22, 2025, 11:15 p.m. | 12 hours, 27 minutes ago <br> <strong>Description : </strong>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3441"> read more </a> </article> <hr> <article> <h3> CVE-2025-27087 - Cray Operating System (COS) Kernel Local Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-27087 <br> <strong>Published : </strong> April 22, 2025, 10:15 p.m. | 11 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27087"> read more </a> </article> <hr> <article> <h3> CVE-2025-37088 - HPE Cray Data Virtualization Service (DVS) Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37088 <br> <strong>Published : </strong> April 22, 2025, 10:15 p.m. | 11 hours, 27 minutes ago <br> <strong>Description : </strong>A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37088"> read more </a> </article> <hr> <article> <h3> CVE-2025-32965 - XRP Ledger Malicious Code Exfiltration in xrpl.js </h3> <p> <strong>CVE ID : </strong>CVE-2025-32965 <br> <strong>Published : </strong> April 22, 2025, 9:15 p.m. | 12 hours, 27 minutes ago <br> <strong>Description : </strong>xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. Versions 4.2.1, 4.2.2, 4.2.3, and 4.2.4 of xrpl.js were compromised and contained malicious code designed to exfiltrate private keys. Version 2.14.2 is also malicious, though it is less likely to lead to exploitation as it is not compatible with other 2.x versions. Anyone who used one of these versions should stop immediately and rotate any private keys or secrets used with affected systems. Users of xrpl.js should pgrade to version 4.2.5 or 2.14.3 to receive a patch. To secure funds, think carefully about whether any keys may have been compromised by this supply chain attack, and mitigate by sending funds to secure wallets, and/or rotating keys. If any account's master key is potentially compromised, disable the key. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32965"> read more </a> </article> <hr> <article> <h3> CVE-2025-37087 - HPE Performance Cluster Manager (HPCM) Arbitrary File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-37087 <br> <strong>Published : </strong> April 22, 2025, 9:15 p.m. | 12 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-37087"> read more </a> </article> <hr> <article> <h3> CVE-2025-26159 - Laravel Starter XSS in Tag Name Field </h3> <p> <strong>CVE ID : </strong>CVE-2025-26159 <br> <strong>Published : </strong> April 22, 2025, 8:15 p.m. | 13 hours, 27 minutes ago <br> <strong>Description : </strong>Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26159"> read more </a> </article> <hr> <article> <h3> CVE-2025-29743 - D-Link DIR-816 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29743 <br> <strong>Published : </strong> April 22, 2025, 8:15 p.m. | 13 hours, 27 minutes ago <br> <strong>Description : </strong>D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29743"> read more </a> </article> <hr> <article> <h3> CVE-2025-31327 - SAP Field Logistics Manage Logistics Data Tampering Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31327 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 14 hours, 27 minutes ago <br> <strong>Description : </strong>SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability are not impacted. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31327"> read more </a> </article> <hr> <article> <h3> CVE-2025-31328 - SAP Learning Solution CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31328 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 14 hours, 27 minutes ago <br> <strong>Description : </strong>SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the confidentiality and integrity of the application without affecting the availability. <br> <strong>Severity:</strong> 4.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31328"> read more </a> </article> <hr> <article> <h3> CVE-2024-53568 - Volmarg Personal Management System Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2024-53568 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 8 hours, 47 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the tag parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53568"> read more </a> </article> <hr> <article> <h3> CVE-2024-53569 - Volmarg Personal Management System Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2024-53569 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 12 hours, 25 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the description parameter. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53569"> read more </a> </article> <hr> <article> <h3> CVE-2025-23253 - NVIDIA NvContainer OpenSSL Hard-Coded Constant DLL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23253 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 12 hours, 25 minutes ago <br> <strong>Description : </strong>NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23253"> read more </a> </article> <hr> <article> <h3> CVE-2025-29621 - RosarioSIS Content Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29621 <br> <strong>Published : </strong> April 22, 2025, 7:15 p.m. | 12 hours, 25 minutes ago <br> <strong>Description : </strong>Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29621"> read more </a> </article> <hr> <article> <h3> CVE-2025-43951 - LabVantage Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43951 <br> <strong>Published : </strong> April 22, 2025, 6:16 p.m. | 11 hours, 46 minutes ago <br> <strong>Description : </strong>LabVantage before LV 8.8.0.13 HF6 allows local file inclusion. Authenticated users can retrieve arbitrary files from the environment via the objectname request parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43951"> read more </a> </article> <hr> <article> <h3> CVE-2025-43952 - Mettler Toledo FreeWeight.Net Web Reports Viewer Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-43952 <br> <strong>Published : </strong> April 22, 2025, 6:16 p.m. | 11 hours, 46 minutes ago <br> <strong>Description : </strong>A cross-site scripting (reflected XSS) vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440). It allows an attacker to inject malicious scripts via the IW_SessionID_ parameter. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 18:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43952"> read more </a> </article> <hr> <article> <h3> CVE-2024-11299 - Memberpress WordPress Sensitive Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-27907 <br> <strong>Published : </strong> April 22, 2025, 5:16 p.m. | 45 minutes ago <br> <strong>Description : </strong>IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27907"> read more </a> </article> <hr> <article> <h3> CVE-2025-29339 - Open5GS UPF Assertion Failure Vulnerability in PFCP Session Parameter Validation </h3> <p> <strong>CVE ID : </strong>CVE-2025-29339 <br> <strong>Published : </strong> April 22, 2025, 5:16 p.m. | 45 minutes ago <br> <strong>Description : </strong>An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29339"> read more </a> </article> <hr> <article> <h3> CVE-2025-34028 - Commvault Command Center Innovation Release Remote Code Execution Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-34028 <br> <strong>Published : </strong> April 22, 2025, 5:16 p.m. | 45 minutes ago <br> <strong>Description : </strong>A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 17:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-34028"> read more </a> </article> <hr> <article> <h3> CVE-2024-33452 - OpenResty Lua-Nginx Module HTTP Request Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-33452 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-33452"> read more </a> </article> <hr> <article> <h3> CVE-2025-23249 - NVIDIA NeMo Framework Remote Code Execution (RCE) </h3> <p> <strong>CVE ID : </strong>CVE-2025-23249 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23249"> read more </a> </article> <hr> <article> <h3> CVE-2025-23250 - NVIDIA NeMo Framework Arbitrary File Write Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23250 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23250"> read more </a> </article> <hr> <article> <h3> CVE-2025-23251 - NVIDIA NeMo Framework Code Generation Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23251 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23251"> read more </a> </article> <hr> <article> <h3> CVE-2025-28024 - TOTOLINK A810R Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28024 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28024"> read more </a> </article> <hr> <article> <h3> CVE-2025-28030 - TOTOLINK A810R Stack Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28030 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28030"> read more </a> </article> <hr> <article> <h3> CVE-2025-28031 - TOTOLINK A810R Hardcoded Telnet Password </h3> <p> <strong>CVE ID : </strong>CVE-2025-28031 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28031"> read more </a> </article> <hr> <article> <h3> CVE-2025-28037 - TOTOLINK A810R/A950RG Remote Command Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-28037 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28037"> read more </a> </article> <hr> <article> <h3> CVE-2025-3767 - Centreon BAM SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3767 <br> <strong>Published : </strong> April 22, 2025, 4:15 p.m. | 1 hour, 46 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3767"> read more </a> </article> <hr> <article> <h3> CVE-2025-1950 - IBM Hardware Management Console - Local Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1950 <br> <strong>Published : </strong> April 22, 2025, 3:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1950"> read more </a> </article> <hr> <article> <h3> CVE-2025-1951 - IBM Hardware Management Console Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1951 <br> <strong>Published : </strong> April 22, 2025, 3:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1951"> read more </a> </article> <hr> <article> <h3> CVE-2025-23176 - Apache Web Server SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23176 <br> <strong>Published : </strong> April 22, 2025, 3:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23176"> read more </a> </article> <hr> <article> <h3> CVE-2025-29547 - Rollback Rx Professional Null Pointer Dereference Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29547 <br> <strong>Published : </strong> April 22, 2025, 3:16 p.m. | 2 hours, 46 minutes ago <br> <strong>Description : </strong>In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer dereference from IOCtl 0x96202000. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29547"> read more </a> </article> <hr> <article> <h3> CVE-2024-40445 - Forkosh Mime Tex Directory Traversal Arbitrary Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2024-40445 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>Directory Traversal vulnerability in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted file upload <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40445"> read more </a> </article> <hr> <article> <h3> CVE-2024-40446 - Forkosh Mime Tex Script Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-40446 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-40446"> read more </a> </article> <hr> <article> <h3> CVE-2024-46546 - NEXTU FLETA AX1500 WIFI6 Router Stack Overflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-46546 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-46546"> read more </a> </article> <hr> <article> <h3> CVE-2025-28032 - TOTOLINK Router Pre-Auth Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28032 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28032"> read more </a> </article> <hr> <article> <h3> CVE-2025-28033 - Totolink Router Pre-Auth Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28033 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28033"> read more </a> </article> <hr> <article> <h3> CVE-2025-28034 - TOTOLINK Router Pre-Auth Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28034 <br> <strong>Published : </strong> April 22, 2025, 2:15 p.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the hostTime parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28034"> read more </a> </article> <hr> <article> <h3> CVE-2025-23175 - Apache Struts Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-23175 <br> <strong>Published : </strong> April 22, 2025, 1:15 p.m. | 4 hours, 46 minutes ago <br> <strong>Description : </strong>Multiple XSS (CWE-79) <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23175"> read more </a> </article> <hr> <article> <h3> CVE-2025-3458 - WordPress Ocean Extra Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3458 <br> <strong>Published : </strong> April 22, 2025, 12:15 p.m. | 5 hours, 47 minutes ago <br> <strong>Description : </strong>The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ocean_gallery_id’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The Classic Editor plugin must be installed and activated to exploit the vulnerability. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3458"> read more </a> </article> <hr> <article> <h3> CVE-2025-3472 - WooCommerce Ocean Extra Plugin Shortcode Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3472 <br> <strong>Published : </strong> April 22, 2025, 12:15 p.m. | 5 hours, 47 minutes ago <br> <strong>Description : </strong>The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes when WooCommerce is also installed and activated. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3472"> read more </a> </article> <hr> <article> <h3> CVE-2025-2092 - Checkmk GmbH Checkmk Log File Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2092 <br> <strong>Published : </strong> April 22, 2025, 12:15 p.m. | 26 minutes ago <br> <strong>Description : </strong>Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be written to log files accessible to administrators. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2092"> read more </a> </article> <hr> <article> <h3> CVE-2025-3457 - WordPress Ocean Extra Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3457 <br> <strong>Published : </strong> April 22, 2025, 12:15 p.m. | 26 minutes ago <br> <strong>Description : </strong>The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwp_icon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3457"> read more </a> </article> <hr> <article> <h3> CVE-2025-46233 - Sirv CDN and Image Hosting Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46233 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 2 hours, 26 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv allows Stored XSS. This issue affects Sirv: from n/a through 7.5.3. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46233"> read more </a> </article> <hr> <article> <h3> CVE-2025-46235 - SKT Blocks - Gutenberg based Page Builder Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-46235 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 2.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46235"> read more </a> </article> <hr> <article> <h3> CVE-2025-46236 - Link Software LLC HTML Forms Stored Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46236 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms allows Stored XSS. This issue affects HTML Forms: from n/a through 1.5.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46236"> read more </a> </article> <hr> <article> <h3> CVE-2025-46237 - Yannick Lefebvre Link Library Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-46237 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Stored XSS. This issue affects Link Library: from n/a through 7.8. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46237"> read more </a> </article> <hr> <article> <h3> CVE-2025-46238 - Apache RBAER Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46238 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Changes allows Stored XSS. This issue affects List Last Changes: from n/a through 1.2.1. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46238"> read more </a> </article> <hr> <article> <h3> CVE-2025-46239 - Theme Switcha Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46239 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme Switcha allows Stored XSS. This issue affects Theme Switcha: from n/a through 3.4. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46239"> read more </a> </article> <hr> <article> <h3> CVE-2025-46240 - Simple Download Counter Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-46240 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter allows Stored XSS. This issue affects Simple Download Counter: from n/a through 2.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46240"> read more </a> </article> <hr> <article> <h3> CVE-2025-46241 - Codepeople Appointment Booking Calendar CSRF-Enabled SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46241 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar allows SQL Injection. This issue affects Appointment Booking Calendar: from n/a through 1.3.92. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46241"> read more </a> </article> <hr> <article> <h3> CVE-2025-46242 - Watu Quiz SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-46242 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz allows SQL Injection. This issue affects Watu Quiz: from n/a through 3.4.3. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46242"> read more </a> </article> <hr> <article> <h3> CVE-2025-46243 - Sonalsinha21 WooCommerce Recover Abandoned Cart CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-46243 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows Cross Site Request Forgery. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.2. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46243"> read more </a> </article> <hr> <article> <h3> CVE-2025-46244 - Dotstore Advanced Linked Variations for Woocommerce Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46244 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Linked Variations for Woocommerce: from n/a through 1.0.3. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46244"> read more </a> </article> <hr> <article> <h3> CVE-2025-46245 - CreativeMindsSolutions CM Ad Changer CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46245 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer allows Cross Site Request Forgery. This issue affects CM Ad Changer: from n/a through 2.0.5. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46245"> read more </a> </article> <hr> <article> <h3> CVE-2025-46246 - CM Answers CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-46246 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers allows Cross Site Request Forgery. This issue affects CM Answers: from n/a through 3.3.3. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46246"> read more </a> </article> <hr> <article> <h3> CVE-2025-46247 - Codepeople Appointment Booking Calendar Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46247 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in codepeople Appointment Booking Calendar allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Appointment Booking Calendar: from n/a through 1.3.92. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46247"> read more </a> </article> <hr> <article> <h3> CVE-2025-46249 - Elementor Simple Calendar CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-46249 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor allows Cross Site Request Forgery. This issue affects Simple calendar for Elementor: from n/a through 1.6.4. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46249"> read more </a> </article> <hr> <article> <h3> CVE-2025-46250 - Vikas Ratudi VForm Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-46250 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS. This issue affects VForm: from n/a through 3.1.14. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46250"> read more </a> </article> <hr> <article> <h3> CVE-2025-46251 - VikRestaurants Table Reservations and Take-Away CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-46251 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants Table Reservations and Take-Away allows Cross Site Request Forgery. This issue affects VikRestaurants Table Reservations and Take-Away: from n/a through 1.3.3. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46251"> read more </a> </article> <hr> <article> <h3> CVE-2025-46252 - Contact Form 7 SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46252 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kofimokome Message Filter for Contact Form 7 allows SQL Injection. This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3.2. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46252"> read more </a> </article> <hr> <article> <h3> CVE-2025-46253 - Ataur GutenKit Stored Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46253 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit allows Stored XSS. This issue affects GutenKit: from n/a through 2.2.2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46253"> read more </a> </article> <hr> <article> <h3> CVE-2025-46254 - Visual Composer Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46254 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.10.0. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46254"> read more </a> </article> <hr> <article> <h3> CVE-2025-46227 - Brecht Custom Related Posts Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-46227 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Related Posts allows Stored XSS. This issue affects Custom Related Posts: from n/a through 1.7.4. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46227"> read more </a> </article> <hr> <article> <h3> CVE-2025-46228 - Bastien Ho Eventpost DOM-Based Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46228 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post allows DOM-Based XSS. This issue affects Event post: from n/a through 5.9.11. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46228"> read more </a> </article> <hr> <article> <h3> CVE-2025-46229 - Israpil Textmetrics Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46229 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetrics allows Stored XSS. This issue affects Textmetrics: from n/a through 3.6.2. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46229"> read more </a> </article> <hr> <article> <h3> CVE-2025-46231 - SERVIT Software Solutions Affiliate-Toolkit CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-46231 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit allows Cross Site Request Forgery. This issue affects affiliate-toolkit: from n/a through 3.7.3. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46231"> read more </a> </article> <hr> <article> <h3> CVE-2025-46232 - Alt Text AI Missing Authorization </h3> <p> <strong>CVE ID : </strong>CVE-2025-46232 <br> <strong>Published : </strong> April 22, 2025, 10:15 a.m. | 1 hour, 37 minutes ago <br> <strong>Description : </strong>Missing Authorization vulnerability in alttextai Download Alt Text AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Download Alt Text AI: from n/a through 1.9.93. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-46232"> read more </a> </article> <hr> <article> <h3> CVE-2025-3518 - Apache Stratos File Upload Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3518 <br> <strong>Published : </strong> April 22, 2025, 9:15 a.m. | 19 minutes ago <br> <strong>Description : </strong>It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. The file upload functionality can be enabled or disabled for specific use cases through configuration. In case the functionality is disabled for at least one use case, the system nevertheless allows files to be uploaded through direct API requests. During the upload file, interception and allowed file type rules are still applied correctly. If file sharing is generally enabled, this issue is not of concern. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3518"> read more </a> </article> <hr> <article> <h3> CVE-2025-3519 - Unblu Spark Authorization Bypass File Replacement </h3> <p> <strong>CVE ID : </strong>CVE-2025-3519 <br> <strong>Published : </strong> April 22, 2025, 9:15 a.m. | 19 minutes ago <br> <strong>Description : </strong>An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Every uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3519"> read more </a> </article> <hr> <article> <h3> CVE-2025-26413 - Apache Kvrocks Out-of-Range Index Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-26413 <br> <strong>Published : </strong> April 22, 2025, 8:15 a.m. | 1 hour, 19 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affects Apache Kvrocks: through 2.11.1. Users are recommended to upgrade to version 2.12.0, which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26413"> read more </a> </article> <hr> <article> <h3> CVE-2024-13569 - WordPress Front End Users Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-13569 <br> <strong>Published : </strong> April 22, 2025, 6:15 a.m. | 3 hours, 19 minutes ago <br> <strong>Description : </strong>The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13569"> read more </a> </article> <hr> <article> <h3> CVE-2025-2594 - WordPress User Registration Membership Unauthorized Authentication Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2594 <br> <strong>Published : </strong> April 22, 2025, 6:15 a.m. | 3 hours, 19 minutes ago <br> <strong>Description : </strong>The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2594"> read more </a> </article> <hr> <article> <h3> CVE-2025-2839 - WordPress WP Import Export Lite Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2839 <br> <strong>Published : </strong> April 22, 2025, 6:15 a.m. | 3 hours, 19 minutes ago <br> <strong>Description : </strong>The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ function in all versions up to, and including, 3.9.27 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2839"> read more </a> </article> <hr> <article> <h3> CVE-2025-3814 - WooCommerce Tax Switch Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3814 <br> <strong>Published : </strong> April 22, 2025, 6:15 a.m. | 3 hours, 19 minutes ago <br> <strong>Description : </strong>The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class-name’ parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3814"> read more </a> </article> <hr> <article> <h3> CVE-2024-46899 - Hitachi Ops Center Analyzer Viewpoint OVF Authentication Credentials Leakage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-46899 <br> <strong>Published : </strong> April 22, 2025, 5:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-46899"> read more </a> </article> <hr> <article> <h3> CVE-2025-2300 - Hitachi Ops Center Common Services Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2300 <br> <strong>Published : </strong> April 22, 2025, 5:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2300"> read more </a> </article> <hr> <article> <h3> CVE-2025-3616 - Greenshift WordPress Animation and Page Builder Blocks Unvalidated File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3616 <br> <strong>Published : </strong> April 22, 2025, 5:15 a.m. | 4 hours, 19 minutes ago <br> <strong>Description : </strong>The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3616"> read more </a> </article> <hr> <article> <h3> CVE-2025-1731 - "USG FLEX H series PostgreSQL Command Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1731 <br> <strong>Published : </strong> April 22, 2025, 3:15 a.m. | 6 hours, 19 minutes ago <br> <strong>Description : </strong>An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1731"> read more </a> </article> <hr> <article> <h3> CVE-2025-1732 - "Fortinet USG FLEX H Series Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1732 <br> <strong>Published : </strong> April 22, 2025, 3:15 a.m. | 6 hours, 19 minutes ago <br> <strong>Description : </strong>An improper privilege management vulnerability in the recovery function of the USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1732"> read more </a> </article> <hr> <article> <h3> CVE-2025-3577 - Zyxel AMG1302-T10B Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3577 <br> <strong>Published : </strong> April 22, 2025, 3:15 a.m. | 6 hours, 19 minutes ago <br> <strong>Description : </strong>**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affected device. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3577"> read more </a> </article> <hr> <article> <h3> CVE-2024-58250 - ppp Passprompt Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58250 <br> <strong>Published : </strong> April 22, 2025, 1:15 a.m. | 8 hours, 19 minutes ago <br> <strong>Description : </strong>The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. <br> <strong>Severity:</strong> 9.3 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58250"> read more </a> </article> <hr> <article> <h3> CVE-2025-3850 - YXJ2018 SpringBoot-Vue-OnlineExam Remote Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3850 <br> <strong>Published : </strong> April 22, 2025, 1:15 a.m. | 8 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3850"> read more </a> </article> <hr> <article> <h3> CVE-2025-3854 - H3C GR-3000AX HTTP POST Request Handler Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3854 <br> <strong>Published : </strong> April 22, 2025, 1:15 a.m. | 8 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3854"> read more </a> </article> <hr> <article> <h3> CVE-2025-3855 - CodeCanyon RISE Ultimate Project Manager File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3855 <br> <strong>Published : </strong> April 22, 2025, 1:15 a.m. | 8 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. The manipulation of the argument profile_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3855"> read more </a> </article> <hr> <article> <h3> CVE-2025-3856 - Xxyopen Novel-Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3856 <br> <strong>Published : </strong> April 22, 2025, 1:15 a.m. | 8 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/searchByPage. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3856"> read more </a> </article> <hr> <article> <h3> CVE-2025-2987 - IBM Maximo Asset Management SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2987 <br> <strong>Published : </strong> April 22, 2025, 12:15 a.m. | 9 hours, 19 minutes ago <br> <strong>Description : </strong>IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. <br> <strong>Severity:</strong> 3.8 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2987"> read more </a> </article> <hr> <article> <h3> CVE-2025-3849 - YXJ2018 SpringBoot-Vue-OnlineExam Remote Unverified Password Change Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3849 <br> <strong>Published : </strong> April 22, 2025, 12:15 a.m. | 9 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 22 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3849"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Easy Cash </h3> <p>nom, prénom, date de naissance</p> <p class="feed-time"> Tue Apr 22 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Easy Cash-2025-04-22"> read more </a> </article> <hr> <article> <h3> CVE-2025-3846 - Markparticle WebServer SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3846 <br> <strong>Published : </strong> April 21, 2025, 11:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file code/http/httprequest.cpp of the component Registration. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3846"> read more </a> </article> <hr> <article> <h3> CVE-2025-3847 - Markparticle WebServer SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3847 <br> <strong>Published : </strong> April 21, 2025, 11:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3847"> read more </a> </article> <hr> <article> <h3> CVE-2025-3843 - Panhainan DS-Java CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3843 <br> <strong>Published : </strong> April 21, 2025, 10:15 p.m. | 11 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in panhainan DS-Java 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3843"> read more </a> </article> <hr> <article> <h3> CVE-2025-3845 - Markparticle WebServer Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3845 <br> <strong>Published : </strong> April 21, 2025, 10:15 p.m. | 11 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWritten of the file code/buffer/buffer.cpp. The manipulation of the argument writePos_ leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3845"> read more </a> </article> <hr> <article> <h3> CVE-2025-3842 - Panhainan DS-Java Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3842 <br> <strong>Published : </strong> April 21, 2025, 9:15 p.m. | 12 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3842"> read more </a> </article> <hr> <article> <h3> CVE-2025-32955 - Harden-Runner Docker Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32955 <br> <strong>Published : </strong> April 21, 2025, 9:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to before 2.12.0 are vulnerable to `disable-sudo` bypass. Harden-Runner includes a policy option `disable-sudo` to prevent the GitHub Actions runner user from using sudo. This is implemented by removing the runner user from the sudoers file. However, this control can be bypassed as the runner user, being part of the docker group, can interact with the Docker daemon to launch privileged containers or access the host filesystem. This allows the attacker to regain root access or restore the sudoers file, effectively bypassing the restriction. This issue has been patched in version 2.12.0. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32955"> read more </a> </article> <hr> <article> <h3> CVE-2025-32956 - ManageWiki SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32956 <br> <strong>Published : </strong> April 21, 2025, 9:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a namespace in Special:ManageWiki/namespaces when using a page prefix (namespace name, which is the current namespace you are renaming) with an injection payload. This issue has been patched in commit f504ed8. A workaround for this vulnerability involves setting `$wgManageWiki['namespaces'] = false;`. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32956"> read more </a> </article> <hr> <article> <h3> CVE-2025-32958 - Adept Language GitHub Token Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32958 <br> <strong>Published : </strong> April 21, 2025, 9:15 p.m. | 10 hours, 19 minutes ago <br> <strong>Description : </strong>Adept is a language for general purpose programming. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the mac-standalone artifact. This artifact is a zip of the current directory, which includes the automatically generated .git/config file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in the AdeptLanguage/Adept repository. This issue has been patched in commit a1a41b7. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32958"> read more </a> </article> <hr> <article> <h3> CVE-2025-3841 - Wix Incubator Jam Jinja2 Template Handler Template Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3841 <br> <strong>Published : </strong> April 21, 2025, 8:15 p.m. | 9 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the argument config['template'] leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3841"> read more </a> </article> <hr> <article> <h3> CVE-2025-27086 - Hewlett Packard Enterprise HPE Performance Cluster Manager (HPCM) Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27086 <br> <strong>Published : </strong> April 21, 2025, 6:15 p.m. | 11 hours, 19 minutes ago <br> <strong>Description : </strong>A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27086"> read more </a> </article> <hr> <article> <h3> CVE-2025-28103 - LaskBlog Arbitrary Account Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28103 <br> <strong>Published : </strong> April 21, 2025, 6:15 p.m. | 11 hours, 19 minutes ago <br> <strong>Description : </strong>Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28103"> read more </a> </article> <hr> <article> <h3> CVE-2025-28104 - LaskBlog Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-28104 <br> <strong>Published : </strong> April 21, 2025, 6:15 p.m. | 11 hours, 19 minutes ago <br> <strong>Description : </strong>Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28104"> read more </a> </article> <hr> <article> <h3> CVE-2024-57394 - Qi-ANXIN Tianqing Endpoint Security Management System DLL Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57394 <br> <strong>Published : </strong> April 21, 2025, 6:15 p.m. | 7 hours, 37 minutes ago <br> <strong>Description : </strong>The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57394"> read more </a> </article> <hr> <article> <h3> CVE-2025-23174 - Apache Apache Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-23174 <br> <strong>Published : </strong> April 21, 2025, 5:15 p.m. | 8 hours, 37 minutes ago <br> <strong>Description : </strong>CWE-200: Exposure of Sensitive Information to an Unauthorized Actor <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23174"> read more </a> </article> <hr> <article> <h3> CVE-2025-28099 - Opencms Arbitrary File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28099 <br> <strong>Published : </strong> April 21, 2025, 5:15 p.m. | 8 hours, 37 minutes ago <br> <strong>Description : </strong>opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp, <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28099"> read more </a> </article> <hr> <article> <h3> CVE-2025-28102 - FlaskBlog XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-28102 <br> <strong>Published : </strong> April 21, 2025, 5:15 p.m. | 8 hours, 37 minutes ago <br> <strong>Description : </strong>A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28102"> read more </a> </article> <hr> <article> <h3> CVE-2025-29446 - Open-WebUI SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29446 <br> <strong>Published : </strong> April 21, 2025, 5:15 p.m. | 8 hours, 37 minutes ago <br> <strong>Description : </strong>open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verify_connection. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29446"> read more </a> </article> <hr> <article> <h3> CVE-2025-43922 - FileWave Windows Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-43922 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 9 hours, 36 minutes ago <br> <strong>Description : </strong>The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43922"> read more </a> </article> <hr> <article> <h3> CVE-2024-12543 - OpenText Content Management Barcode Attribute Manipulation </h3> <p> <strong>CVE ID : </strong>CVE-2024-12543 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 7 hours, 18 minutes ago <br> <strong>Description : </strong>User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12543"> read more </a> </article> <hr> <article> <h3> CVE-2025-28367 - MojoPortal Directory Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28367 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 7 hours, 18 minutes ago <br> <strong>Description : </strong>mojoPortal <=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this vulnerability to access the Web.Config file and obtain the MachineKey. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28367"> read more </a> </article> <hr> <article> <h3> CVE-2025-32431 - Traefik Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32431 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 7 hours, 18 minutes ago <br> <strong>Description : </strong>Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a /../ in its path, it’s possible to target a backend, exposed using another router, by-passing the middlewares chain. This issue has been patched in versions 2.11.24, 3.3.6, and 3.4.0-rc2. A workaround involves adding a `PathRegexp` rule to the matcher to prevent matching a route with a `/../` in the path. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32431"> read more </a> </article> <hr> <article> <h3> CVE-2025-32793 - Cilium Wireguard Transparent Encryption Race Condition </h3> <p> <strong>CVE ID : </strong>CVE-2025-32793 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 7 hours, 18 minutes ago <br> <strong>Description : </strong>Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32793"> read more </a> </article> <hr> <article> <h3> CVE-2025-3857 - Amazon.IonDotnet Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3857 <br> <strong>Published : </strong> April 21, 2025, 4:15 p.m. | 7 hours, 18 minutes ago <br> <strong>Description : </strong>When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition that could potentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked or derivative code is patched to incorporate the new fixes. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3857"> read more </a> </article> <hr> <article> <h3> CVE-2025-29659 - Yi IOT XY-3820 Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29659 <br> <strong>Published : </strong> April 21, 2025, 3:16 p.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmd_listen" function located in the "cmd" binary. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29659"> read more </a> </article> <hr> <article> <h3> CVE-2025-29660 - Yi IOT XY-3820 Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29660 <br> <strong>Published : </strong> April 21, 2025, 3:16 p.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789. This service lacks proper input validation, allowing attackers to execute arbitrary scripts present on the device by sending specially crafted TCP requests using directory traversal techniques. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29660"> read more </a> </article> <hr> <article> <h3> CVE-2025-2298 - Dremio Software File Deletion Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2298 <br> <strong>Published : </strong> April 21, 2025, 3:16 p.m. | 8 hours, 18 minutes ago <br> <strong>Description : </strong>An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local filesystems. This vulnerability exists due to insufficient access controls on an API endpoint, enabling any authenticated user to specify and delete files outside their intended scope. Exploiting this flaw could lead to data loss, denial of service (DoS), and potential escalation of impact depending on the deleted files. Affected versions: * Any version of Dremio below 24.0.0 * Dremio 24.3.0 - 24.3.16 * Dremio 25.0.0 - 25.0.14 * Dremio 25.1.0 - 25.1.7 * Dremio 25.2.0 - 25.2.4 Fixed in version: * Dremio 24.3.17 and above * Dremio 25.0.15 and above * Dremio 25.1.8 and above * Dremio 25.2.5 and above * Dremio 26.0.0 and above <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2298"> read more </a> </article> <hr> <article> <h3> CVE-2025-2517 - OpenText ArcSight Enterprise Security Manager Domain Reference Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-2517 <br> <strong>Published : </strong> April 21, 2025, 3:16 p.m. | 8 hours, 18 minutes ago <br> <strong>Description : </strong>Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2517"> read more </a> </article> <hr> <article> <h3> CVE-2024-12862 - OpenText Content Server Unauthorized Deletion </h3> <p> <strong>CVE ID : </strong>CVE-2025-28121 <br> <strong>Published : </strong> April 21, 2025, 3:15 p.m. | 6 hours, 18 minutes ago <br> <strong>Description : </strong>code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28121"> read more </a> </article> <hr> <article> <h3> CVE-2025-29287 - MCMS Ueditor Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29287 <br> <strong>Published : </strong> April 21, 2025, 3:15 p.m. | 6 hours, 18 minutes ago <br> <strong>Description : </strong>An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29287"> read more </a> </article> <hr> <article> <h3> CVE-2024-12863 - OpenText Content Management CE Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12863 <br> <strong>Published : </strong> April 21, 2025, 3:15 p.m. | 4 hours, 18 minutes ago <br> <strong>Description : </strong>Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12863"> read more </a> </article> <hr> <article> <h3> CVE-2024-42699 - OpenCMS Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-42699 <br> <strong>Published : </strong> April 21, 2025, 3:15 p.m. | 4 hours, 18 minutes ago <br> <strong>Description : </strong>Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to inject javascript payload via image title sub-field in the image field <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42699"> read more </a> </article> <hr> <article> <h3> CVE-2024-41446 - Alkacon OpenCMS Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41446 <br> <strong>Published : </strong> April 21, 2025, 2:15 p.m. | 5 hours, 18 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41446"> read more </a> </article> <hr> <article> <h3> CVE-2025-43916 - Sonos API Open Redirection and Hardcoded Secret Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43916 <br> <strong>Published : </strong> April 21, 2025, 2:15 p.m. | 5 hours, 18 minutes ago <br> <strong>Description : </strong>Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the authority component, which is not consistent with RFC 6819 section 5.2.3.5. An authorization code may be sent to an attacker-controlled destination. This might have further implications in conjunction with "Decompiling the app revealed a hardcoded secret." <br> <strong>Severity:</strong> 3.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43916"> read more </a> </article> <hr> <article> <h3> CVE-2025-32408 - Soffid Console Java Deserialization Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-32408 <br> <strong>Published : </strong> April 21, 2025, 1:15 p.m. | 4 hours, 45 minutes ago <br> <strong>Description : </strong>In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32408"> read more </a> </article> <hr> <article> <h3> CVE-2025-3837 - "VMware End of Life OVA Connect Remote Code Execution Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3837 <br> <strong>Published : </strong> April 21, 2025, 10:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certain circumstances, an actor can manipulate a specific request parameter and inject code execution payload which could lead to a remote code execution on the infrastructure hosting this component. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3837"> read more </a> </article> <hr> <article> <h3> CVE-2025-3838 - "VMware Connect Unauthorized Access to Installer Credentials" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3838 <br> <strong>Published : </strong> April 21, 2025, 10:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network. Under certain conditions, this could allow a bad actor to gain unauthorized access to the local db containing weakly hashed credentials of the installer. This EOL component was deprecated in September 2023 with end of support extended till January 2024. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3838"> read more </a> </article> <hr> <article> <h3> CVE-2025-3840 - Oracle OVA Connect Installer Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3840 <br> <strong>Published : </strong> April 21, 2025, 10:15 a.m. | 7 hours, 46 minutes ago <br> <strong>Description : </strong>An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An actor can manipulate the action parameter of the login form to inject malicious scripts which would lead to a XSS attack under certain conditions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3840"> read more </a> </article> <hr> <article> <h3> Le France Cybersecurity Challenge (FCSC) démarre aujourd’hui ! </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Le France Cybersecurity Challenge (FCSC) démarre aujourd’hui !</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Actu%20FCSC%202025.png?h=125a58ae&itok=iIbQS8Hw"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/Actu%20FCSC%202025.png?h=125a58ae&itok=zErbEWc3"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/Actu%20FCSC%202025.png?h=125a58ae&itok=zeCVP0V3"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/Actu%20FCSC%202025.png?h=125a58ae&itok=_sWGOhc3"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Actu%20FCSC%202025.png?h=125a58ae&itok=iIbQS8Hw" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-21T07:04:00+00:00" title="Lundi 21 Avril 2025 - 07:04" class="datetime">lun 21/04/2025 - 07:04</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Jusqu’au 27 avril 2025, venez vous mesurer aux épreuves du CTF de l’ANSSI et tentez de gagner votre place au sein de la Team France qui défendra nos couleurs lors de l’European Cybersecurity Challenge.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Le <a href="https://cyber.gouv.fr/france-cybersecurity-challenge">France Cybersecurity Challenge (FCSC)</a> est un Capture The Flag (CTF) de type jeopardy créé par les équipes de l’ANSSI et lancé en 2019.</p> <p>Plus de 100 épreuves vous attendent : crypto, pwn, hardware, web, forensics… Avec une grande nouveauté : une journée de « speedrun » qui se déroulera le samedi 26 avril.</p> <p>Rendez-vous sur <a href="https://fcsc.fr/"><strong>FCSC 2025</strong></a><strong> </strong>!</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3><strong>Trois catégories d'âge à l'inscription</strong></h3> <p><strong>Catégorie junior :</strong></p> <ul><li>Être né(e)s en 2005, 2006, 2007, 2008, 2009, 2010 ou 2011 ;</li> <li>Être de nationalité française ;</li> <li>Candidater pour intégrer la Team France et participer à l'European Cybersecurity Challenge (ECSC).</li> </ul><p><strong>Catégorie senior :</strong></p> <ul><li>Être né(e)s en 2000, 2001, 2002, 2003 ou 2004 ;</li> <li>Être de nationalité française ;</li> <li>Candidater pour intégrer la Team France et participer à l'European Cybersecurity Challenge (ECSC).</li> </ul><p><strong>Hors catégorie :</strong></p> <ul><li>Si vous n'êtes pas éligible pour une question d'âge ;</li> <li>Si vous n'êtes pas de nationalité française ;</li> <li>Si vous ne souhaitez pas candidater pour intégrer la Team France et participer à l'European Cybersecurity Challenge (ECSC).</li> </ul><h3><strong>Sélection pour l’European Cybersecurity Challenge</strong></h3> <p>Vous avez moins de 25 ans ? Le FCSC est l’opportunité pour vous d’être sélectionné pour intégrer la Team France qui représentera le drapeau tricolore lors de l’<u><a href="https://cyber.gouv.fr/european-cybersecurity-challenge">European Cybersecurity Challenge (ECSC)</a></u> 2025. La prochaine édition aura lieu à Varsovie en Pologne, du 6 au 10 octobre 2025.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--default"> <figure role="figure" aria-label="FCSC 2025"><a data-lightbox="public://image/banniere-actu-fcsc.jpg" data-title=" FCSC 2025" data-alt="" href="https://cyber.gouv.fr/sites/default/files/image/banniere-actu-fcsc.jpg" class="lightbox-img"> <img src="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/banniere-actu-fcsc.jpg?itok=e_ev9WV-" alt="" /></a> <figcaption>FCSC 2025</figcaption></figure></div> </div> </div> </p> <p class="feed-time"> Mon, 21 Apr 2025 07:04:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/le-france-cybersecurity-challenge-fcsc-demarre-aujourdhui"> read more </a> </article> <hr> <article> <h3> CVE-2025-43970 - GoBGP MRT Length Validation Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-43970 <br> <strong>Published : </strong> April 21, 2025, 1:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family). <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43970"> read more </a> </article> <hr> <article> <h3> CVE-2025-43971 - GoBGP Zero-Value Software Version Len Panic </h3> <p> <strong>CVE ID : </strong>CVE-2025-43971 <br> <strong>Published : </strong> April 21, 2025, 1:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43971"> read more </a> </article> <hr> <article> <h3> CVE-2025-43972 - GoBGP FlowSpec Parser Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-43972 <br> <strong>Published : </strong> April 21, 2025, 1:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43972"> read more </a> </article> <hr> <article> <h3> CVE-2025-43973 - GoBGP Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43973 <br> <strong>Published : </strong> April 21, 2025, 1:15 a.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43973"> read more </a> </article> <hr> <article> <h3> CVE-2025-43961 - Fujifilm LibRaw Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43961 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43961"> read more </a> </article> <hr> <article> <h3> CVE-2025-43962 - LibRaw Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43962 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calculations. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43962"> read more </a> </article> <hr> <article> <h3> CVE-2025-43963 - LibRaw Out-of-Bounds Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43963 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43963"> read more </a> </article> <hr> <article> <h3> CVE-2025-43964 - LibRaw Unvalidated Memory Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43964 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43964"> read more </a> </article> <hr> <article> <h3> CVE-2025-43966 - Libheif NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43966 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43966"> read more </a> </article> <hr> <article> <h3> CVE-2025-43967 - Libheif NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43967 <br> <strong>Published : </strong> April 21, 2025, 12:15 a.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 21 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43967"> read more </a> </article> <hr> <article> <h3> CVE-2020-36844 - KnowBe4 Security Awareness Training Reflective Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2020-36844 <br> <strong>Published : </strong> April 20, 2025, 10:15 p.m. | 16 hours, 58 minutes ago <br> <strong>Description : </strong>The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2020-36844"> read more </a> </article> <hr> <article> <h3> CVE-2020-36845 - KnowBe4 Security Awareness Training Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2020-36845 <br> <strong>Published : </strong> April 20, 2025, 10:15 p.m. | 16 hours, 58 minutes ago <br> <strong>Description : </strong>The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2020-36845"> read more </a> </article> <hr> <article> <h3> CVE-2025-43955 - Convertigo TwsCachedXPathAPI Commons-JXPath API Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43955 <br> <strong>Published : </strong> April 20, 2025, 8:15 p.m. | 18 hours, 58 minutes ago <br> <strong>Description : </strong>TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs. <br> <strong>Severity:</strong> 2.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43955"> read more </a> </article> <hr> <article> <h3> CVE-2025-43954 - QMarkdown Quasar-ui-QMarkdown Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-43954 <br> <strong>Published : </strong> April 20, 2025, 7:15 p.m. | 19 hours, 58 minutes ago <br> <strong>Description : </strong>QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43954"> read more </a> </article> <hr> <article> <h3> CVE-2025-3830 - Kuangstudy KuangSimpleBBS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3830 <br> <strong>Published : </strong> April 20, 2025, 5:15 p.m. | 21 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3830"> read more </a> </article> <hr> <article> <h3> CVE-2025-3828 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3828 <br> <strong>Published : </strong> April 20, 2025, 4:15 p.m. | 22 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3828"> read more </a> </article> <hr> <article> <h3> CVE-2025-3829 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3829 <br> <strong>Published : </strong> April 20, 2025, 4:15 p.m. | 22 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3829"> read more </a> </article> <hr> <article> <h3> CVE-2025-3827 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3827 <br> <strong>Published : </strong> April 20, 2025, 3:15 p.m. | 21 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3827"> read more </a> </article> <hr> <article> <h3> CVE-2025-3826 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3826 <br> <strong>Published : </strong> April 20, 2025, 1:15 p.m. | 23 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsupplier_name/txtaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3826"> read more </a> </article> <hr> <article> <h3> CVE-2025-3825 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3825 <br> <strong>Published : </strong> April 20, 2025, 12:15 p.m. | 1 day ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategory_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3825"> read more </a> </article> <hr> <article> <h3> CVE-2025-3823 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3823 <br> <strong>Published : </strong> April 20, 2025, 11:15 a.m. | 22 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3823"> read more </a> </article> <hr> <article> <h3> CVE-2025-3824 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3824 <br> <strong>Published : </strong> April 20, 2025, 11:15 a.m. | 22 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproduct_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3824"> read more </a> </article> <hr> <article> <h3> CVE-2025-3822 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3822 <br> <strong>Published : </strong> April 20, 2025, 7:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirm_password/txtnew_password/txtold_password leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3822"> read more </a> </article> <hr> <article> <h3> CVE-2025-3821 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3821 <br> <strong>Published : </strong> April 20, 2025, 4:15 a.m. | 1 day, 3 hours ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3821"> read more </a> </article> <hr> <article> <h3> CVE-2025-43929 - Kitty Open Actions Local File Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43929 <br> <strong>Published : </strong> April 20, 2025, 3:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a document opened in KDE ghostwriter). <br> <strong>Severity:</strong> 4.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43929"> read more </a> </article> <hr> <article> <h3> CVE-2025-43928 - Infodraw Media Relay Service File Reading Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43928 <br> <strong>Published : </strong> April 20, 2025, 3:15 a.m. | 20 hours, 36 minutes ago <br> <strong>Description : </strong>In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43928"> read more </a> </article> <hr> <article> <h3> CVE-2025-43919 - cPanel WHM GNU Mailman File Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43919 <br> <strong>Published : </strong> April 20, 2025, 1:15 a.m. | 22 hours, 36 minutes ago <br> <strong>Description : </strong>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the private archive authentication endpoint) via the username parameter. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43919"> read more </a> </article> <hr> <article> <h3> CVE-2025-43920 - cPanel WHM Shell Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43920 <br> <strong>Published : </strong> April 20, 2025, 1:15 a.m. | 22 hours, 36 minutes ago <br> <strong>Description : </strong>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43920"> read more </a> </article> <hr> <article> <h3> CVE-2025-43921 - cPanel WHM GNU Mailman Unauthenticated List Creation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43921 <br> <strong>Published : </strong> April 20, 2025, 1:15 a.m. | 22 hours, 36 minutes ago <br> <strong>Description : </strong>GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 20 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43921"> read more </a> </article> <hr> <article> <h3> CVE-2023-26819 - cJSON Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2023-26819 <br> <strong>Published : </strong> April 19, 2025, 10:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-26819"> read more </a> </article> <hr> <article> <h3> CVE-2023-30421 - Mjson strtod Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2023-30421 <br> <strong>Published : </strong> April 19, 2025, 10:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114. <br> <strong>Severity:</strong> 2.9 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-30421"> read more </a> </article> <hr> <article> <h3> CVE-2025-43918 - SSL.com Domain Validation Email Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43918 <br> <strong>Published : </strong> April 19, 2025, 10:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name of a requester's email address, even when the requester does not otherwise establish administrative control of that domain. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43918"> read more </a> </article> <hr> <article> <h3> CVE-2022-47111 - 7-Zip XZ File Format Parsing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-47111 <br> <strong>Published : </strong> April 19, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-47111"> read more </a> </article> <hr> <article> <h3> CVE-2022-47112 - 7-Zip XZ File Format Parsing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-47112 <br> <strong>Published : </strong> April 19, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. <br> <strong>Severity:</strong> 2.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-47112"> read more </a> </article> <hr> <article> <h3> CVE-2025-3820 - Tenda W12 and i24 Remote Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3820 <br> <strong>Published : </strong> April 19, 2025, 9:15 p.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3820"> read more </a> </article> <hr> <article> <h3> CVE-2025-3818 - Webpy Web.py PostgresDB SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3818 <br> <strong>Published : </strong> April 19, 2025, 8:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._process_insert_query of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3818"> read more </a> </article> <hr> <article> <h3> CVE-2025-3819 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3819 <br> <strong>Published : </strong> April 19, 2025, 8:15 p.m. | 1 day, 1 hour ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3819"> read more </a> </article> <hr> <article> <h3> CVE-2025-43917 - Pritunl Client Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43917 <br> <strong>Published : </strong> April 19, 2025, 7:15 p.m. | 1 day ago <br> <strong>Description : </strong>In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product. Specifically, an administrator can insert a new file at the pathname of the removed pritunl-service file. This file then is executed by a LaunchDaemon as root. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43917"> read more </a> </article> <hr> <article> <h3> CVE-2025-3817 - SourceCodester Online Eyewear Shop SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3817 <br> <strong>Published : </strong> April 19, 2025, 7:15 p.m. | 22 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=delete_stock. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3817"> read more </a> </article> <hr> <article> <h3> CVE-2025-3808 - Zhenfeng13 My-BBS Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3808 <br> <strong>Published : </strong> April 19, 2025, 6:15 p.m. | 21 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints might be affected. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3808"> read more </a> </article> <hr> <article> <h3> CVE-2025-3816 - Westboy CicadasCMS OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3816 <br> <strong>Published : </strong> April 19, 2025, 6:15 p.m. | 21 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/schedule/save of the component Scheduled Task Handler. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3816"> read more </a> </article> <hr> <article> <h3> CVE-2025-3807 - Zhenfeng13 My-BBS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3807 <br> <strong>Published : </strong> April 19, 2025, 5:15 p.m. | 22 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3807"> read more </a> </article> <hr> <article> <h3> CVE-2025-3806 - Dazhouda Lcms Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3806 <br> <strong>Published : </strong> April 19, 2025, 5:15 p.m. | 18 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this issue is some unknown functionality of the file /admin of the component Edit Profile Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3806"> read more </a> </article> <hr> <article> <h3> CVE-2025-3804 - Thautwarm VSCode-Diana Jinja2 Template Handler Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3804 <br> <strong>Published : </strong> April 19, 2025, 4:15 p.m. | 19 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3804"> read more </a> </article> <hr> <article> <h3> CVE-2025-3805 - Jinja2 Template Handler Local File Injection Vulnerability in Sarrionandia Tournatrack </h3> <p> <strong>CVE ID : </strong>CVE-2025-3805 <br> <strong>Published : </strong> April 19, 2025, 4:15 p.m. | 19 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc540ec. Affected by this vulnerability is an unknown functionality of the file check_id.py of the component Jinja2 Template Handler. The manipulation of the argument ID leads to injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3805"> read more </a> </article> <hr> <article> <h3> CVE-2025-3802 - Tenda W12 and i24 HTTPd cgiPingSet Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3802 <br> <strong>Published : </strong> April 19, 2025, 3:15 p.m. | 18 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The manipulation of the argument pingIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3802"> read more </a> </article> <hr> <article> <h3> CVE-2025-3803 - Tenda W12 and i24 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3803 <br> <strong>Published : </strong> April 19, 2025, 3:15 p.m. | 18 hours, 36 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3803"> read more </a> </article> <hr> <article> <h3> CVE-2025-3801 - Songquanpeng One-Api Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3801 <br> <strong>Published : </strong> April 19, 2025, 2:15 p.m. | 16 hours, 30 minutes ago <br> <strong>Description : </strong>A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an unknown part of the component System Setting Handler. The manipulation of the argument Homepage Content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3801"> read more </a> </article> <hr> <article> <h3> CVE-2025-3800 - Oracle WCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3800 <br> <strong>Published : </strong> April 19, 2025, 12:15 p.m. | 14 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/AnonymousController.php. The manipulation of the argument mobile_phone leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3800"> read more </a> </article> <hr> <article> <h3> CVE-2025-3799 - WordPress CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3799 <br> <strong>Published : </strong> April 19, 2025, 11:15 a.m. | 15 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app/controllers/AnonymousController.php. The manipulation of the argument email/username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3799"> read more </a> </article> <hr> <article> <h3> CVE-2025-3798 - Apache WCMS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3798 <br> <strong>Published : </strong> April 19, 2025, 10:15 a.m. | 16 hours, 29 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in WCMS 11. This issue affects the function sub of the file app/admin/AdvadminController.php of the component Advertisement Image Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3798"> read more </a> </article> <hr> <article> <h3> CVE-2025-3661 - WordPress SB Chart Block Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3661 <br> <strong>Published : </strong> April 19, 2025, 10:15 a.m. | 14 hours, 29 minutes ago <br> <strong>Description : </strong>The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3661"> read more </a> </article> <hr> <article> <h3> CVE-2021-4455 - "Wordpress Smart Product Review Plugin File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2021-4455 <br> <strong>Published : </strong> April 19, 2025, 8:15 a.m. | 16 hours, 29 minutes ago <br> <strong>Description : </strong>The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-4455"> read more </a> </article> <hr> <article> <h3> CVE-2025-3404 - "WordPress Download Manager Arbitrary File Deletion Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3404 <br> <strong>Published : </strong> April 19, 2025, 8:15 a.m. | 16 hours, 29 minutes ago <br> <strong>Description : </strong>The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the savePackage function in all versions up to, and including, 3.3.12. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3404"> read more </a> </article> <hr> <article> <h3> CVE-2025-3797 - SeaCMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3797 <br> <strong>Published : </strong> April 19, 2025, 7:15 a.m. | 14 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admin_topic.php?action=delall. The manipulation of the argument e_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3797"> read more </a> </article> <hr> <article> <h3> CVE-2025-2111 - WordPress Insert Headers And Footers CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2111 <br> <strong>Published : </strong> April 19, 2025, 6:15 a.m. | 15 hours, 45 minutes ago <br> <strong>Description : </strong>The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2111"> read more </a> </article> <hr> <article> <h3> CVE-2025-3809 - WordPress Debug Log Manager Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3809 <br> <strong>Published : </strong> April 19, 2025, 6:15 a.m. | 15 hours, 45 minutes ago <br> <strong>Description : </strong>The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3809"> read more </a> </article> <hr> <article> <h3> CVE-2024-13926 - WordPress WP-Syntax Regular Expression Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-13926 <br> <strong>Published : </strong> April 19, 2025, 6:15 a.m. | 8 hours, 28 minutes ago <br> <strong>Description : </strong>The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13926"> read more </a> </article> <hr> <article> <h3> CVE-2025-3103 - Elementor CLEVER WordPress File Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3103 <br> <strong>Published : </strong> April 19, 2025, 5:15 a.m. | 9 hours, 28 minutes ago <br> <strong>Description : </strong>The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server, which may contain sensitive information including database credentials. The vulnerability was partially patched in version 2.4. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3103"> read more </a> </article> <hr> <article> <h3> CVE-2025-1093 - WordPress AIHub Theme Remote Code Execution File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1093 <br> <strong>Published : </strong> April 19, 2025, 4:15 a.m. | 10 hours, 28 minutes ago <br> <strong>Description : </strong>The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1093"> read more </a> </article> <hr> <article> <h3> CVE-2025-1457 - Elementor Element Pack Addons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1457 <br> <strong>Published : </strong> April 19, 2025, 4:15 a.m. | 10 hours, 28 minutes ago <br> <strong>Description : </strong>The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Wrapper Link, Countdown and Gallery widgets in all versions up to, and including, 5.10.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1457"> read more </a> </article> <hr> <article> <h3> CVE-2025-3275 - Themesflat Addons For Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3275 <br> <strong>Published : </strong> April 19, 2025, 4:15 a.m. | 10 hours, 28 minutes ago <br> <strong>Description : </strong>The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider widget in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3275"> read more </a> </article> <hr> <article> <h3> CVE-2025-3284 - WordPress User Registration Membership CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3284 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.3. This is due to missing or incorrect nonce validation on the user_registration_pro_delete_account() function. This makes it possible for unauthenticated attackers to force delete users, including administrators, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3284"> read more </a> </article> <hr> <article> <h3> CVE-2025-43893 - Apache HTTP Server Cross-Site Request Forgery (CSRF) </h3> <p> <strong>CVE ID : </strong>CVE-2025-43893 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43893"> read more </a> </article> <hr> <article> <h3> CVE-2025-43894 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-43894 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43894"> read more </a> </article> <hr> <article> <h3> CVE-2025-43895 - Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-43895 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43895"> read more </a> </article> <hr> <article> <h3> CVE-2025-43896 - Apache HTTP Server SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-43896 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43896"> read more </a> </article> <hr> <article> <h3> CVE-2025-43897 - Apache HTTP Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-43897 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43897"> read more </a> </article> <hr> <article> <h3> CVE-2025-43898 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-43898 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43898"> read more </a> </article> <hr> <article> <h3> CVE-2025-43899 - Apache Apache Struts Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-43899 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43899"> read more </a> </article> <hr> <article> <h3> CVE-2025-43900 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-43900 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43900"> read more </a> </article> <hr> <article> <h3> CVE-2025-43901 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-43901 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 11 hours, 28 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43901"> read more </a> </article> <hr> <article> <h3> CVE-2025-3278 - "UrbanGo Membership Plugin Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3278 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 10 hours, 36 minutes ago <br> <strong>Description : </strong>The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_register_role' field. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3278"> read more </a> </article> <hr> <article> <h3> CVE-2025-2010 - JobWP WordPress SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2010 <br> <strong>Published : </strong> April 19, 2025, 3:15 a.m. | 3 hours, 27 minutes ago <br> <strong>Description : </strong>The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwp_upload_resume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 19 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2010"> read more </a> </article> <hr> <article> <h3> CVE-2024-53591 - Seclore Brute Force Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-53591 <br> <strong>Published : </strong> April 18, 2025, 9:15 p.m. | 9 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53591"> read more </a> </article> <hr> <article> <h3> CVE-2025-29058 - Qimou CMS Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-43903 <br> <strong>Published : </strong> April 18, 2025, 9:15 p.m. | 13 hours, 28 minutes ago <br> <strong>Description : </strong>NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-43903"> read more </a> </article> <hr> <article> <h3> CVE-2025-3796 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3796 <br> <strong>Published : </strong> April 18, 2025, 9:15 p.m. | 12 hours, 35 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/contact-us.php. The manipulation of the argument pagetitle/pagedes/email/mobnumber/timing leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3796"> read more </a> </article> <hr> <article> <h3> CVE-2025-3795 - "DaiCuo SEO Optimization Settings Section Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3795 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 10 hours, 27 minutes ago <br> <strong>Description : </strong>A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SEO Optimization Settings Section. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3795"> read more </a> </article> <hr> <article> <h3> CVE-2024-57493 - RedoxOS Relibc Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57493 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57493"> read more </a> </article> <hr> <article> <h3> CVE-2025-25983 - Macro-video Technologies Co.,Ltd V380 Pro Android Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-25983 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component. <br> <strong>Severity:</strong> 3.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25983"> read more </a> </article> <hr> <article> <h3> CVE-2025-25984 - Macro-video Technologies Co.,Ltd V380E6_C1 IP Camera UART Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25984 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25984"> read more </a> </article> <hr> <article> <h3> CVE-2025-25985 - Macro-video Technologies Co.,Ltd V380E6_C1 IP Camera Physical Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25985 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25985"> read more </a> </article> <hr> <article> <h3> CVE-2025-28197 - Crawl4AI SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-28197 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28197"> read more </a> </article> <hr> <article> <h3> CVE-2025-32377 - Rasa Pro Unauthenticated Voice Data Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32377 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs). A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source. This issue has been patched for audiocodes, audiocodes_stream, and genesys connectors in versions 3.9.20, 3.10.19, 3.11.7 and 3.12.6. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32377"> read more </a> </article> <hr> <article> <h3> CVE-2025-36625 - Nessus HTTP Request Manipulation Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-36625 <br> <strong>Published : </strong> April 18, 2025, 8:15 p.m. | 6 hours, 27 minutes ago <br> <strong>Description : </strong>In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-36625"> read more </a> </article> <hr> <article> <h3> CVE-2025-24914 - Nessus Windows Unsecured Directory Permissions Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24914 <br> <strong>Published : </strong> April 18, 2025, 7:15 p.m. | 7 hours, 27 minutes ago <br> <strong>Description : </strong>When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914 <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24914"> read more </a> </article> <hr> <article> <h3> CVE-2025-28355 - Volmarg Personal Management System CSRF Attack </h3> <p> <strong>CVE ID : </strong>CVE-2025-28355 <br> <strong>Published : </strong> April 18, 2025, 7:15 p.m. | 7 hours, 27 minutes ago <br> <strong>Description : </strong>Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28355"> read more </a> </article> <hr> <article> <h3> CVE-2025-1697 - HP Touchpoint Analytics Service Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1697 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1697"> read more </a> </article> <hr> <article> <h3> CVE-2025-28231 - Itel Electronics IP Stream Remote Command Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28231 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28231"> read more </a> </article> <hr> <article> <h3> CVE-2025-28233 - BW Broadcast TX600/150/1000/30/50 Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28233 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28233"> read more </a> </article> <hr> <article> <h3> CVE-2025-28235 - Soundcraft Ui Series Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-28235 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28235"> read more </a> </article> <hr> <article> <h3> CVE-2025-28236 - Nautel VX Series Transmitters Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28236 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28236"> read more </a> </article> <hr> <article> <h3> CVE-2025-28237 - WorldCast Systems ECRESO FM/DAB/TV Transmitter Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28237 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON payload. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28237"> read more </a> </article> <hr> <article> <h3> CVE-2025-28238 - Elber REBLE310 Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28238 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28238"> read more </a> </article> <hr> <article> <h3> CVE-2025-28242 - DAEnetIP4 METO Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28242 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28242"> read more </a> </article> <hr> <article> <h3> CVE-2025-29512 - NodeBB Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-29512 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29512"> read more </a> </article> <hr> <article> <h3> CVE-2025-29513 - NodeBB XSS Stored </h3> <p> <strong>CVE ID : </strong>CVE-2025-29513 <br> <strong>Published : </strong> April 18, 2025, 6:15 p.m. | 8 hours, 27 minutes ago <br> <strong>Description : </strong>Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29513"> read more </a> </article> <hr> <article> <h3> CVE-2024-41447 - Alkacon OpenCMS Stored Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-41447 <br> <strong>Published : </strong> April 18, 2025, 5:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-41447"> read more </a> </article> <hr> <article> <h3> CVE-2025-28059 - Nagios Network Analyzer Session Hijacking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28059 <br> <strong>Published : </strong> April 18, 2025, 5:15 p.m. | 2 hours, 35 minutes ago <br> <strong>Description : </strong>An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke associated API tokens, enabling unauthorized access to restricted functions. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28059"> read more </a> </article> <hr> <article> <h3> CVE-2025-29953 - Apache ActiveMQ NMS OpenWire Client Arbitrary Code Execution via Untrusted Deserialization </h3> <p> <strong>CVE ID : </strong>CVE-2025-29953 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client. This issue affects Apache ActiveMQ NMS OpenWire Client before 2.1.1 when performing connections to untrusted servers. Such servers could abuse the unbounded deserialization in the client to provide malicious responses that may eventually cause arbitrary code execution on the client. Version 2.1.0 introduced a allow/denylist feature to restrict deserialization, but this feature could be bypassed. The .NET team has deprecated the built-in .NET binary serialization feature starting with .NET 9 and suggests migrating away from binary serialization. The project is considering to follow suit and drop this part of the NMS API altogether. Users are recommended to upgrade to version 2.1.1, which fixes the issue. We also recommend to migrate away from relying on .NET binary serialization as a hardening method for the future. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29953"> read more </a> </article> <hr> <article> <h3> CVE-2025-30158 - NamelessMC DoS Frame Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30158 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker to perform a UI-based denial of service (DoS) by injecting oversized iframes that block the forum UI and disrupt normal user interactions. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30158"> read more </a> </article> <hr> <article> <h3> CVE-2025-30357 - NamelessMC Comment Deletion Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30357 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30357"> read more </a> </article> <hr> <article> <h3> CVE-2025-3124 - GitHub Enterprise Server Private Repository Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-31118 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31118"> read more </a> </article> <hr> <article> <h3> CVE-2025-31120 - NamelessMC Insecure View Count Mechanism Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31120 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, an insecure view count mechanism in the forum page allows an unauthenticated attacker to artificially increase the view count. The application relies on a client-side cookie (nl-topic-[tid]) (or session variable for guests) to determine if a view should be counted. When a client does not provide the cookie, every page request increments the counter, leading to incorrect view metrics. This issue has been patched in version 2.2.0. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31120"> read more </a> </article> <hr> <article> <h3> CVE-2025-32389 - NamelessMC SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-32389 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC is vulnerable to SQL injection by providing an unexpected square bracket GET parameter syntax. Square bracket GET parameter syntax refers to the structure `?param[0]=a&param[1]=b&param[2]=c` utilized by PHP, which is parsed by PHP as `$_GET['param']` being of type array. This issue has been patched in version 2.1.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32389"> read more </a> </article> <hr> <article> <h3> CVE-2025-32434 - PyTorch Remote Command Execution (RCE) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32434 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32434"> read more </a> </article> <hr> <article> <h3> CVE-2025-32442 - Fastify Content-Type Validation Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32442 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Fastify is a fast and low overhead web framework, for Node.js. In versions 5.0.0 to 5.3.0, applications that specify different validation strategies for different content types have a possibility to bypass validation by providing a _slightly altered_ content type such as with different casing or altered whitespacing before `;`. This issue has been patched in version 5.3.1. A workaround involves not specifying individual content types in the schema. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32442"> read more </a> </article> <hr> <article> <h3> CVE-2025-32792 - SES JavaScript Lexical Scope Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32792 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using `ses` and the Compartment API to evaluate third-party code in an isolated execution environment that have also elsewhere used `const`, `let`, and `class` bindings in the top-level scope of a `` tag will have inadvertently revealed these bindings in the lexical scope of third-party code. This issue has been patched in version 1.12.0. Workarounds for this issue involve either avoiding top-level `let`, `const`, or `class` bindings in `` tags, or change these to `var` bindings to be reflected on `globalThis`. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32792"> read more </a> </article> <hr> <article> <h3> CVE-2025-32795 - Dify App Name, Description and Icon Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32795 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted permissions to edit APP names, descriptions and icons. This access control flaw allows non-admin users to modify app details, despite being restricted from viewing apps, which poses a security risk to the integrity of the application. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can modify app details. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32795"> read more </a> </article> <hr> <article> <h3> CVE-2025-32796 - Dify App Management Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32796 <br> <strong>Published : </strong> April 18, 2025, 4:15 p.m. | 3 hours, 35 minutes ago <br> <strong>Description : </strong>Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users can enable or disable apps through the API, even though the web UI button for this action is disabled and normal users are not permitted to make such changes. This access control flaw allows non-admin users to make unauthorized changes, which can disrupt the functionality and availability of the APPS. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the API access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can send enable or disable requests for apps. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32796"> read more </a> </article> <hr> <article> <h3> CVE-2025-39469 - Pantherius Modal Survey Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11421 <br> <strong>Published : </strong> April 18, 2025, 2:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: The developer has disputed this as a vulnerability. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11421"> read more </a> </article> <hr> <article> <h3> CVE-2025-40364 - Linux Kernel io_uring Buffer Import Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40364 <br> <strong>Published : </strong> April 18, 2025, 2:15 p.m. | 2 hours, 7 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40364"> read more </a> </article> <hr> <article> <h3> CVE-2025-32790 - Dify LLM App Development Platform Unauthorized APP DSL Export Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32790 <br> <strong>Published : </strong> April 18, 2025, 1:15 p.m. | 3 hours, 6 minutes ago <br> <strong>Description : </strong>Dify is an open-source LLM app development platform. In versions 0.6.8 and prior, a vulnerability was identified in the DIFY AI where normal users are improperly granted permissions to export APP DSL. The feature in '/export' should only allow administrator users to export DSL. A workaround for this vulnerability involves updating the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can export the APP DSL. This vulnerability is fixed in 0.6.13. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32790"> read more </a> </article> <hr> <article> <h3> CVE-2025-3789 - Baseweb JSite Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3789 <br> <strong>Published : </strong> April 18, 2025, 1:15 p.m. | 3 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /a/sys/area/save. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3789"> read more </a> </article> <hr> <article> <h3> CVE-2025-3790 - Apache Druid Monitoring Console Remote Improper Access Controls Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3790 <br> <strong>Published : </strong> April 18, 2025, 1:15 p.m. | 3 hours, 6 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3790"> read more </a> </article> <hr> <article> <h3> CVE-2024-45651 - IBM Sterling Connect:Direct Web Services Session Fixation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45651 <br> <strong>Published : </strong> April 18, 2025, 11:15 a.m. | 5 hours, 6 minutes ago <br> <strong>Description : </strong>IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45651"> read more </a> </article> <hr> <article> <h3> CVE-2024-49808 - IBM Sterling Connect:Direct Web Services Identity Spoofing </h3> <p> <strong>CVE ID : </strong>CVE-2024-49808 <br> <strong>Published : </strong> April 18, 2025, 11:15 a.m. | 5 hours, 6 minutes ago <br> <strong>Description : </strong>IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49808"> read more </a> </article> <hr> <article> <h3> CVE-2025-3106 - LA-Studio Element Kit for Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3106 <br> <strong>Published : </strong> April 18, 2025, 10:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Table of Contents widget in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3106"> read more </a> </article> <hr> <article> <h3> CVE-2025-3787 - PbootCMS Server-Side Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3787 <br> <strong>Published : </strong> April 18, 2025, 10:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3787"> read more </a> </article> <hr> <article> <h3> CVE-2025-3788 - Baseweb JSite Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3788 <br> <strong>Published : </strong> April 18, 2025, 10:15 a.m. | 6 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3788"> read more </a> </article> <hr> <article> <h3> CVE-2025-2492 - ASUS Router AiCloud Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2492 <br> <strong>Published : </strong> April 18, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2492"> read more </a> </article> <hr> <article> <h3> CVE-2025-3056 - WordPress Download Manager Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3056 <br> <strong>Published : </strong> April 18, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3056"> read more </a> </article> <hr> <article> <h3> CVE-2025-3785 - D-Link DWR-M961 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3785 <br> <strong>Published : </strong> April 18, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP of the component Authorization Interface. The manipulation of the argument Hostname leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.49 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3785"> read more </a> </article> <hr> <article> <h3> CVE-2025-3786 - Tenda AC15 Wireless Repeat Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3786 <br> <strong>Published : </strong> April 18, 2025, 9:15 a.m. | 7 hours, 7 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3786"> read more </a> </article> <hr> <article> <h3> CVE-2024-26014 - Cisco WebEx Meeting Center Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-26014 <br> <strong>Published : </strong> April 18, 2025, 8:15 a.m. | 8 hours, 7 minutes ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-26014"> read more </a> </article> <hr> <article> <h3> CVE-2025-39728 - Samsung Exynos Linux Clock Array Index Out-of-Bounds </h3> <p> <strong>CVE ID : </strong>CVE-2025-39728 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to dereferencing `ctx->clk_data.hws` before setting `ctx->clk_data.num = nr_clks`. Move that up to fix the crash. UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP <snip> Call trace: samsung_clk_init+0x110/0x124 (P) samsung_clk_init+0x48/0x124 (L) samsung_cmu_register_one+0x3c/0xa0 exynos_arm64_register_cmu+0x54/0x64 __gs101_cmu_top_of_clk_init_declare+0x28/0x60 ... <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39728"> read more </a> </article> <hr> <article> <h3> CVE-2025-39735 - Linux Kernel JFS Slab Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39735 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in ea_get(), the code checks if the extended attribute list (xattr) size matches ea_size. If not, it logs "ea_get: invalid extended attribute" and calls print_hex_dump(). Here, EALIST_SIZE(ea_buf->xattr) returns 4110417968, which exceeds INT_MAX (2,147,483,647). Then ea_size is clamped: int size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf->xattr)); Although clamp_t aims to bound ea_size between 0 and 4110417968, the upper limit is treated as an int, causing an overflow above 2^31 - 1. This leads "size" to wrap around and become negative (-184549328). The "size" is then passed to print_hex_dump() (called "len" in print_hex_dump()), it is passed as type size_t (an unsigned type), this is then stored inside a variable called "int remaining", which is then assigned to "int linelen" which is then passed to hex_dump_to_buffer(). In print_hex_dump() the for loop, iterates through 0 to len-1, where len is 18446744073525002176, calling hex_dump_to_buffer() on each iteration: for (i = 0; i < len; i += rowsize) { linelen = min(remaining, rowsize); remaining -= rowsize; hex_dump_to_buffer(ptr + i, linelen, rowsize, groupsize, linebuf, sizeof(linebuf), ascii); ... } The expected stopping condition (i < len) is effectively broken since len is corrupted and very large. This eventually leads to the "ptr+i" being passed to hex_dump_to_buffer() to get closer to the end of the actual bounds of "ptr", eventually an out of bounds access is done in hex_dump_to_buffer() in the following for loop: for (j = 0; j < len; j++) { if (linebuflen < lx + 2) goto overflow2; ch = ptr[j]; ... } To fix this we should validate "EALIST_SIZE(ea_buf->xattr)" before it is utilised. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39735"> read more </a> </article> <hr> <article> <h3> CVE-2025-39755 - Linux Kernel Null Pointer Deref Vulnerability in GPib Pcmcia Driver </h3> <p> <strong>CVE ID : </strong>CVE-2025-39755 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was still only using the old .name initialization in the drv field. This led to a NULL pointer deref Oops in strcmp called from pcmcia_register_driver. Initialize the pcmcia_driver struct name field. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39755"> read more </a> </article> <hr> <article> <h3> CVE-2025-39778 - Linux Kernel objtool Out-of-Bounds Stack Read </h3> <p> <strong>CVE ID : </strong>CVE-2025-39778 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that. Fixes the following warning with an UBSAN kernel: vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39778"> read more </a> </article> <hr> <article> <h3> CVE-2025-39930 - Linux Kernel ASoC Simple-Card-Utils Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-39930 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() commit 419d1918105e ("ASoC: simple-card-utils: use __free(device_node) for device node") uses __free(device_node) for dlc->of_node, but we need to keep it while driver is in use. Don't use __free(device_node) in graph_util_parse_dai(). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39930"> read more </a> </article> <hr> <article> <h3> CVE-2025-39989 - In the Linux kernel, the following vulnerability h </h3> <p> <strong>CVE ID : </strong>CVE-2025-39989 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context Patch series "mm/hwpoison: Fix regressions in memory failure handling", v4. ## 1. What am I trying to do: This patchset resolves two critical regressions related to memory failure handling that have appeared in the upstream kernel since version 5.17, as compared to 5.10 LTS. - copyin case: poison found in user page while kernel copying from user space - instr case: poison found while instruction fetching in user space ## 2. What is the expected outcome and why - For copyin case: Kernel can recover from poison found where kernel is doing get_user() or copy_from_user() if those places get an error return and the kernel return -EFAULT to the process instead of crashing. More specifily, MCE handler checks the fixup handler type to decide whether an in kernel #MC can be recovered. When EX_TYPE_UACCESS is found, the PC jumps to recovery code specified in _ASM_EXTABLE_FAULT() and return a -EFAULT to user space. - For instr case: If a poison found while instruction fetching in user space, full recovery is possible. User process takes #PF, Linux allocates a new page and fills by reading from storage. ## 3. What actually happens and why - For copyin case: kernel panic since v5.17 Commit 4c132d1d844a ("x86/futex: Remove .fixup usage") introduced a new extable fixup type, EX_TYPE_EFAULT_REG, and later patches updated the extable fixup type for copy-from-user operations, changing it from EX_TYPE_UACCESS to EX_TYPE_EFAULT_REG. It breaks previous EX_TYPE_UACCESS handling when posion found in get_user() or copy_from_user(). - For instr case: user process is killed by a SIGBUS signal due to #CMCI and #MCE race When an uncorrected memory error is consumed there is a race between the CMCI from the memory controller reporting an uncorrected error with a UCNA signature, and the core reporting and SRAR signature machine check when the data is about to be consumed. ### Background: why *UN*corrected errors tied to *C*MCI in Intel platform [1] Prior to Icelake memory controllers reported patrol scrub events that detected a previously unseen uncorrected error in memory by signaling a broadcast machine check with an SRAO (Software Recoverable Action Optional) signature in the machine check bank. This was overkill because it's not an urgent problem that no core is on the verge of consuming that bad data. It's also found that multi SRAO UCE may cause nested MCE interrupts and finally become an IERR. Hence, Intel downgrades the machine check bank signature of patrol scrub from SRAO to UCNA (Uncorrected, No Action required), and signal changed to #CMCI. Just to add to the confusion, Linux does take an action (in uc_decode_notifier()) to try to offline the page despite the UC*NA* signature name. ### Background: why #CMCI and #MCE race when poison is consuming in Intel platform [1] Having decided that CMCI/UCNA is the best action for patrol scrub errors, the memory controller uses it for reads too. But the memory controller is executing asynchronously from the core, and can't tell the difference between a "real" read and a speculative read. So it will do CMCI/UCNA if an error is found in any read. Thus: 1) Core is clever and thinks address A is needed soon, issues a speculative read. 2) Core finds it is going to use address A soon after sending the read request 3) The CMCI from the memory controller is in a race with MCE from the core that will soon try to retire the load from address A. Quite often (because speculation has got better) the CMCI from the memory controller is delivered before the core is committed to the instruction reading address A, so the interrupt is taken, and Linux offlines the page (marking it as poison). ## Why user process is killed for instr case Commit 046545a661af ("mm/hwpoison: fix error page recovered but reported "not ---truncated--- <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-39989"> read more </a> </article> <hr> <article> <h3> CVE-2025-40014 - "AMD spi objtool Stack Buffer Overflow" </h3> <p> <strong>CVE ID : </strong>CVE-2025-40014 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the entire amd_spi_freq array without breaking out early, causing 'i' to go beyond the array bounds. Fix that by stopping the loop when it gets to the last entry, so the low speed_hz value gets clamped up to AMD_SPI_MIN_HZ. Fixes the following warning with an UBSAN kernel: drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode() <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40014"> read more </a> </article> <hr> <article> <h3> CVE-2025-40114 - Linux IIO Light Veml6075 Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-40114 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array contains only 5 elements, but the index calculated by veml6075_read_int_time_index can range from 0 to 7, which could lead to out-of-bounds access. The check prevents this issue. Coverity Issue CID 1574309: (#1 of 1): Out-of-bounds read (OVERRUN) overrun-local: Overrunning array veml6075_it_ms of 5 4-byte elements at element index 7 (byte offset 31) using index int_index (which evaluates to 7) This is hardening against potentially broken hardware. Good to have but not necessary to backport. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40114"> read more </a> </article> <hr> <article> <h3> CVE-2025-40325 - Linux Kernel MD/Raid10 Wait Barrier Violation (Information Disclosure) </h3> <p> <strong>CVE ID : </strong>CVE-2025-40325 <br> <strong>Published : </strong> April 18, 2025, 7:15 a.m. | 9 hours, 6 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQ_NOWAIT raid10_handle_discard should wait barrier before returning a discard bio which has REQ_NOWAIT. And there is no need to print warning calltrace if a discard bio has REQ_NOWAIT flag. Quality engineer usually checks dmesg and reports error if dmesg has warning/error calltrace. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 18 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-40325"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Indigo </h3> <p>adresse email, plaque d’immatriculation, nom, prénom, numéro de téléphone, adresse postale</p> <p class="feed-time"> Fri Apr 18 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Indigo-2025-04-18"> read more </a> </article> <hr> <article> <h3> Etat de la menace informatique sur le secteur des transports urbains </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Etat de la menace informatique sur le secteur des transports urbains</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-web-em-transports-urbains.png?h=375f3c03&itok=S-HAYeio"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu-web-em-transports-urbains.png?h=375f3c03&itok=mZaAlyOg"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu-web-em-transports-urbains.png?h=375f3c03&itok=Co3CvEPx"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu-web-em-transports-urbains.png?h=375f3c03&itok=KCMDhPf2"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-web-em-transports-urbains.png?h=375f3c03&itok=S-HAYeio" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-17T07:37:28+00:00" title="Jeudi 17 Avril 2025 - 07:37" class="datetime">jeu 17/04/2025 - 07:37</time></span> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Les transports urbains constituent un secteur critique et les attaques informatiques qui le visent peuvent avoir des conséquences significatives qui génèrent parfois des difficultés dans la continuité des services ou encore dans la sécurisation des données. La menace à l’encontre des entités du secteur cible des entreprises de toute taille, dans le monde entier, et qui ont la gestion d’une large variété de moyen de transports. Répondant à ses missions de connaissance de la menace informatique, l’ANSSI partage un état de la menace sur le secteur du transport urbain.</p> <h3><strong>Un secteur fortement exposé en 2024</strong></h3> <p>Tout au long de l’année, le contexte des Jeux Olympiques et Paralympiques de Paris 2024 a mis en lumière l’exposition de ce secteur aux cyberattaques, les tensions géopolitiques ayant été un catalyseur fort de cette menace avec de nombreuses attaques par déni de services.</p> <p>L’imbrication de plusieurs réseaux informatiques de grande taille ainsi que la diversité des équipements qui les composent met en exergue des niveaux de sécurisation hétérogène complexifiant d’autant plus les questions de sécurité des systèmes d’information et augmentant significativement la surface d’attaque.</p> <p>Les entités du secteur sont également fortement ciblées en raison du grand nombre de données personnelles des usagers, ainsi une attention toute particulière doit être portée à la protection de ces bases de données qui font régulièrement l’objet d’attaques à des fins d’exfiltration.</p> <h3><strong>Prévenir et se protéger contre ces menaces</strong></h3> <p>Dans son état de la menace, l’ANSSI rappelle l’importance d’avoir une approche globale de la sécurité et recommande aux entités de réaliser une cartographie globale des systèmes d’information afin d’identifier les risques affectant l’entité ou encore mesurer la maturité des systèmes d’informations concernés.</p> <p>Il est essentiel de travailler sur des modes de fonctionnement dégradé notamment pour assurer et préparer en parallèle un <strong>plan de continuité d’activité (PCA)</strong> et un <strong>plan de reprise d’activité (PRA)</strong>. La mise en pratique ces recommandations permettra au secteur des transports urbains d’anticiper ces menaces.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://www.cert.ssi.gouv.fr/uploads/CERTFR-2025-CTI-005.pdf" se="" rendre="" sur="" transports="" urbains="" etat="" de="" la="" menace="" informatique=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Transports urbains - Etat de la menace informatique </a> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 17 Apr 2025 07:37:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/etat-de-la-menace-informatique-sur-le-secteur-des-transports-urbains"> read more </a> </article> <hr> <article> <h3> L’ANSSI publie ses guides sur la remédiation d’incidents en anglais </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI publie ses guides sur la remédiation d’incidents en anglais</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_corpus_remediation_EN.png?h=74aa4f64&itok=rQLU6EwY"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_corpus_remediation_EN.png?h=74aa4f64&itok=H3ZCW9eb"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_corpus_remediation_EN.png?h=74aa4f64&itok=WT_zLwk9"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_corpus_remediation_EN.png?h=74aa4f64&itok=-GZ0HbbN"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_corpus_remediation_EN.png?h=74aa4f64&itok=rQLU6EwY" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-16T12:39:20+00:00" title="Mercredi 16 Avril 2025 - 12:39" class="datetime">mer 16/04/2025 - 12:39</time></span> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Suite au lancement, en janvier 2024, d’un corpus sur la remédiation post-incident et l’intégration de trois guides (stratégique, opérationnel, technique) à cette collection, l’ANSSI publie les traductions de ces trois guides en anglais.</p> <p>L’objectif de ces traductions est de poursuivre la diffusion des piliers doctrinaux élaborés par l’ANSSI, à l’échelle européenne et internationale.</p> <p>En parallèle, le chantier de l’ANSSI sur la remédiation se poursuit. Le corpus (<a href="https://cyber.gouv.fr/piloter-la-remediation-dun-incident-cyber">Piloter la remédiation d’un incident cyber | ANSSI</a>) a vocation à être progressivement enrichi de nouveaux documents, sur la base des échanges menés activement par l’agence avec l’écosystème.</p> <p>Les traductions peuvent être retrouvées sur la page suivante du site de l’ANSSI en anglais :</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://cyber.gouv.fr/en/remediation" se="" rendre="" sur="" voir="" les="" guides="" la="" rem="" en="" anglais=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Voir les guides sur la remédiation en anglais </a> </div> </div> </div> </div> </p> <p class="feed-time"> Wed, 16 Apr 2025 12:39:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-publie-ses-guides-sur-la-remediation-dincidents-en-anglais"> read more </a> </article> <hr> <article> <h3> CVE-2025-1688 - Milestone XProtect Installer Password Reset Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1688 <br> <strong>Published : </strong> April 15, 2025, 11:15 a.m. | 1 hour ago <br> <strong>Description : </strong>Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the Management Server. To mitigate the issue, we highly recommend updating system configuration password via GUI with a standard procedure. Any system upgraded with 2024 R1 or 2024 R2 release installer is vulnerable to this issue. Systems upgraded from 2023 R3 or older with version 2025 R1 and newer are not affected. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1688"> read more </a> </article> <hr> <article> <h3> CVE-2025-32943 - PeerTube File Traversal Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32943 <br> <strong>Published : </strong> April 15, 2025, 11:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32943"> read more </a> </article> <hr> <article> <h3> CVE-2025-2083 - WordPress Logo Carousel Gutenberg Block Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2083 <br> <strong>Published : </strong> April 15, 2025, 10:15 a.m. | 2 hours ago <br> <strong>Description : </strong>The Logo Carousel Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderId’ parameter in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2083"> read more </a> </article> <hr> <article> <h3> CVE-2024-45712 - SolarWinds Serv-U Client-Side Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45712 <br> <strong>Published : </strong> April 15, 2025, 9:15 a.m. | 3 hours ago <br> <strong>Description : </strong>SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low. <br> <strong>Severity:</strong> 2.6 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45712"> read more </a> </article> <hr> <article> <h3> CVE-2025-3574 - T-INNOVA Deporsite Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-3574 <br> <strong>Published : </strong> April 15, 2025, 9:15 a.m. | 3 hours ago <br> <strong>Description : </strong>Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3574"> read more </a> </article> <hr> <article> <h3> CVE-2025-3575 - T-INNOVA Deporsite Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-3575 <br> <strong>Published : </strong> April 15, 2025, 9:15 a.m. | 3 hours ago <br> <strong>Description : </strong>Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3575"> read more </a> </article> <hr> <article> <h3> CVE-2025-3578 - Aidex Privilege Escalation and Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3578 <br> <strong>Published : </strong> April 15, 2025, 9:15 a.m. | 3 hours ago <br> <strong>Description : </strong>A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of users in production or development environments. In addition, it would be possible to cause bugs that would result in the exfiltration of sensitive information, such as details about the software or internal system paths. These actions could be carried out through the misuse of LLM Prompt (chatbot) technology, via the /api/<string-chat>/message endpoint, by manipulating the contents of the ‘content’ parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3578"> read more </a> </article> <hr> <article> <h3> CVE-2025-3579 - Aidex Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3579 <br> <strong>Published : </strong> April 15, 2025, 9:15 a.m. | 3 hours ago <br> <strong>Description : </strong>In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system. This includes executing operating system (Unix) commands, interacting with internal services such as PHP or MySQL, and even invoking native functions of the framework used, such as Laravel or Symfony. This execution is achieved by Prompt Injection attacks through the /api/<string-chat>/message endpoint, manipulating the content of the ‘content’ parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3579"> read more </a> </article> <hr> <article> <h3> L'ANSSI publie son rapport d'activité 2024 </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L'ANSSI publie son rapport d'activité 2024</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_RA_2024.jpg?h=e258c799&itok=5BY8Spw4"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_RA_2024.jpg?h=e258c799&itok=a4NKmcVO"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_RA_2024.jpg?h=e258c799&itok=aZ-VMivH"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_RA_2024.jpg?h=e258c799&itok=DDIv1QNy"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_RA_2024.jpg?h=e258c799&itok=5BY8Spw4" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-15T07:43:30+00:00" title="Mardi 15 Avril 2025 - 07:43" class="datetime">mar 15/04/2025 - 07:43</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">À l’occasion de la publication de son rapport d’activité 2024, l’ANSSI revient sur une année de mobilisation exceptionnelle tant de ses agents que de « l’équipe de France » de la cybersécurité dans son ensemble. </div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Face à une menace cyber toujours plus forte, l’année écoulée a de nouveau démontré que la cybersécurité de la Nation est un sport collectif.</p> <h3><strong>Les Jeux olympiques et paralympiques de Paris 2024 comme consécration du modèle français de cyberdéfense</strong></h3> <p>En tant que cheffe de file du volet cyber, l’ANSSI a été au cœur de la préparation des Jeux olympiques et paralympiques de Paris 2024. Le succès de cet événement international majeur est un accomplissement pour l’Agence, qui témoigne également de la pertinence du modèle de cyberdéfense français bâti autour d’une autorité nationale et ancré dans un écosystème élargi et déployé dans les territoires. Les Jeux sont le résultat d’une méthode – anticipation, préparation, entraînement – et d’une équipe – l’écosystème cyber public et privé – qui doivent perdurer pour<strong> permettre à la France de rester parmi les grandes nations de la cybersécurité.</strong></p> <h3><strong>La directive NIS 2, vecteur d’une transformation profonde pour l’ANSSI</strong></h3> <p>En 2024, l’ANSSI a poursuivi ses travaux de transposition de la directive NIS 2 qui sont le moteur d’un changement majeur de son organisation, de ses méthodes et de sa manière d’interagir avec ses bénéficiaires et ses partenaires. Déjà fortement mobilisées sur le sujet au cours des dernières années, les équipes de l’Agence continueront de l’être au quotidien, en coordination avec l’écosystème cyber, pour accompagner des milliers d’entités dans leur cybersécurité.</p> <h3><strong>Des progrès précieux pour l’élévation générale de la cybersécurité de l’Union européenne</strong></h3> <p>À l’image du cadre réglementaire défini par NIS 2, ou encore du vote du règlement sur la résilience cyber, pour lesquels l’ANSSI s’est pleinement engagée, la cybersécurité en Europe a connu de belles avancées en 2024. Par ailleurs, face aux évolutions technologiques, et notamment aux technologies de rupture, la conservation d’une maîtrise souveraine des expertises techniques s’impose comme une mission essentielle de l’ANSSI.</p> <h4><strong>L’année 2024 en quelques chiffres :</strong></h4> <ul><li><strong>656 </strong>agents âgés en moyenne de <strong>36 </strong>ans, œuvrent au quotidien pour la cybersécurité de la Nation, au sein de l’ANSSI.</li> <li><strong>4 386 (+15%)</strong> événements de sécurité traités par l’ANSSI, et <strong>1 361 (+18%)</strong> incidents ayant impliqué un acteur malveillant.</li> <li><strong>68</strong> formations labellisées SecNumedu, <strong>1 696</strong> personnes formées au Centre de formation à la sécurité des systèmes d’information (CFSSI) et <strong>117 856</strong> attestations SecNumacadémie décernées.</li> </ul><h4><strong>L’année 2024 en quelques dates clés :</strong></h4> <p>Au-delà des JOP24 d’autres d’événements ont marqué l’année 2024 :</p> <ul><li><strong>31 janvier</strong> : Adoption du schéma européen de certification de cybersécurité fondé sur des critères commun.</li> <li><strong>10 mai </strong>: Entrée en vigueur du décret d’application de la loi de programmation militaire 2024-2030, permettant à l’ANSSI de mettre en œuvre l’ensemble des nouvelles capacités dont elle l’a dotée.</li> <li><strong>9 juillet </strong>: Publications des recommandations de l’ANSSI pour l’hébergement des systèmes d’information sensible dans le cloud.</li> <li><strong>15 octobre </strong>: Présentation en conseil des ministres du projet de loi relatif à la résilience des activités d’importance vitale, à la protection des infrastructures critiques à la cybersécurité et à la résilience opérationnelle du secteur financier dont le titre II, Cybersécurité, vise à transposer la directive NIS 2.</li> </ul></div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--citation paragraph--view-mode--default"> <div class="citation-bloc"> <div class="citation-quote"> <i class="fas fa-angle-double-left" aria-hidden="true"></i> </div> <blockquote class="citation"> <p> Cette année exceptionnelle ouvre désormais la voie à une nouvelle étape pour l’ANSSI, qui a été partagée dans notre stratégie pour 2025-2027 . Il s’agit de prendre acte des évolutions non seulement du paysage cyber, mais également de notre environnement plus global. Pour ce faire, nous aurons besoin de « l’équipe de France » de cybersécurité à nos côtes. </p> <div class="auteur-bloc"> <div class="image-auteur"> <img src="https://cyber.gouv.fr/sites/default/files/styles/auteur_de_citation/public/image/Vincent%20Strubel%20-%20%C2%A9%20Patrick%20Gaillardin_1579x1958.png?h=05636d59&itok=kNypVCwV" alt="" /></div> <div class="auteur-info"> <p class="nom"> Vincent Strubel </p> <p class="description"> Directeur général </p> </div> </div> </blockquote> <div class="citation-quote end"> <i class="fas fa-angle-double-right" aria-hidden="true"></i> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/rapport_activite_ANSSI_2024.pdf" download=""> <div class="mimetype pdf">PDF</div> <div class="name">Rapport d'activité ANSSI 2024</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Tue, 15 Apr 2025 07:43:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-publie-son-rapport-dactivite-2024"> read more </a> </article> <hr> <article> <h3> CVE-2024-13207 - "Widget for Social Page Feeds WordPress Stored Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13207 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13207"> read more </a> </article> <hr> <article> <h3> CVE-2024-13610 - "Simple Social Media Share Buttons WordPress Stored Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13610 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>The Simple Social Media Share Buttons WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13610"> read more </a> </article> <hr> <article> <h3> CVE-2025-2225 - Elementor Responsive Addons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2225 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rael_title_tag' parameter in all versions up to, and including, 1.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 1.6.9. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2225"> read more </a> </article> <hr> <article> <h3> CVE-2025-32993 - Vision Helpdesk SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-32993 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>Vision Helpdesk through 5.7.0 allows Time-Based Blind SQL injection via the Forgot Password (aka index.php?/home/forgot-password) vis_username parameter. Authentication is not needed. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32993"> read more </a> </article> <hr> <article> <h3> CVE-2025-3576 - Kerberos MIT RC4-MD5 GSSAPI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3576 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3576"> read more </a> </article> <hr> <article> <h3> CVE-2025-3622 - Xorbits Inference Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3622 <br> <strong>Published : </strong> April 15, 2025, 6:15 a.m. | 6 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3622"> read more </a> </article> <hr> <article> <h3> CVE-2025-3573 - "jQuery Validation Cross-site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3573 <br> <strong>Published : </strong> April 15, 2025, 5:15 a.m. | 7 hours ago <br> <strong>Description : </strong>Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3573"> read more </a> </article> <hr> <article> <h3> CVE-2025-29983 - Dell Trusted Device Link Following Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29983 <br> <strong>Published : </strong> April 15, 2025, 4:15 a.m. | 8 hours ago <br> <strong>Description : </strong>Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29983"> read more </a> </article> <hr> <article> <h3> CVE-2025-29984 - Dell Trusted Device Default Permission Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29984 <br> <strong>Published : </strong> April 15, 2025, 4:15 a.m. | 8 hours ago <br> <strong>Description : </strong>Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29984"> read more </a> </article> <hr> <article> <h3> CVE-2025-32939 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-32939 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32939"> read more </a> </article> <hr> <article> <h3> CVE-2025-32940 - Apache Struts Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32940 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32940"> read more </a> </article> <hr> <article> <h3> CVE-2025-32941 - Apache HTTP Server Unvalidated Request Parameter </h3> <p> <strong>CVE ID : </strong>CVE-2025-32941 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>Rejected reason: Not used <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32941"> read more </a> </article> <hr> <article> <h3> CVE-2025-32996 - Apache HTTP Proxy Middleware Write-What-Where Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32996 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32996"> read more </a> </article> <hr> <article> <h3> CVE-2025-32997 - Apache http-proxy-middleware JSON Body Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32997 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32997"> read more </a> </article> <hr> <article> <h3> CVE-2025-3470 - WordPress TS Poll SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3470 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3470"> read more </a> </article> <hr> <article> <h3> CVE-2025-3612 - Demtec Graphytics Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3612 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in Demtec Graphytics 5.0.7. This affects an unknown part of the file /visualization of the component HTTP GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3612"> read more </a> </article> <hr> <article> <h3> CVE-2025-3613 - Demtec Graphytics Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3613 <br> <strong>Published : </strong> April 15, 2025, 3:15 a.m. | 9 hours ago <br> <strong>Description : </strong>A vulnerability has been found in Demtec Graphytics 5.0.7 and classified as problematic. This vulnerability affects unknown code of the file /visualization. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3613"> read more </a> </article> <hr> <article> <h3> CVE-2025-24797 - Meshtastic Protocol Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24797 <br> <strong>Published : </strong> April 15, 2025, 12:15 a.m. | 6 hours ago <br> <strong>Description : </strong>Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2. <br> <strong>Severity:</strong> 9.4 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24797"> read more </a> </article> <hr> <article> <h3> CVE-2025-31491 - "AutoGPT Cross-Domain Cookie and Header Leakage Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31491 <br> <strong>Published : </strong> April 15, 2025, 12:15 a.m. | 6 hours ago <br> <strong>Description : </strong>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows of leakage of cross-domain cookies and protected headers in requests redirect. AutoGPT uses a wrapper around the requests python library, located in autogpt_platform/backend/backend/util/request.py. In this wrapper, redirects are specifically NOT followed for the first request. If the wrapper is used with allow_redirects set to True (which is the default), any redirect is not followed by the initial request, but rather re-requested by the wrapper using the new location. However, there is a fundamental flaw in manually re-requesting the new location: it does not account for security-sensitive headers which should not be sent cross-origin, such as the Authorization and Proxy-Authorization header, and cookies. For example in autogpt_platform/backend/backend/blocks/github/_api.py, an Authorization header is set when retrieving data from the GitHub API. However, if GitHub suffers from an open redirect vulnerability (such as the made-up example of https://api.github.com/repos/{owner}/{repo}/issues/comments/{comment_id}/../../../../../redirect/?url=https://joshua.hu/), and the script can be coerced into visiting it with the Authorization header, the GitHub credentials in the Authorization header will be leaked. This allows leaking auth headers and private cookies. This vulnerability is fixed in 0.6.1. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31491"> read more </a> </article> <hr> <article> <h3> CVE-2025-31494 - AutoGPT WebSocket API Graph ID Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31494 <br> <strong>Published : </strong> April 15, 2025, 12:15 a.m. | 6 hours ago <br> <strong>Description : </strong>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. The AutoGPT Platform's WebSocket API transmitted node execution updates to subscribers based on the graph_id+graph_version. Additionally, there was no check prohibiting users from subscribing with another user's graph_id+graph_version. As a result, node execution updates from one user's graph execution could be received by another user within the same instance. This vulnerability does not occur between different instances or between users and non-users of the platform. Single-user instances are not affected. In private instances with a user white-list, the impact is limited by the fact that all potential unintended recipients of these node execution updates must have been admitted by the administrator. This vulnerability is fixed in 0.6.1. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 15 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31494"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Hertz </h3> <p>nom, coordonnées, date de naissance, permis de conduire, carte de crédit, passeport</p> <p class="feed-time"> Tue Apr 15 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Hertz-2025-04-15"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Afflelou </h3> <p>nom, prénom, date de naissance, adresse postale, adresse email, numéro de téléphone, informations commerciales</p> <p class="feed-time"> Tue Apr 15 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Afflelou-2025-04-15"> read more </a> </article> <hr> <article> <h3> CVE-2025-31490 - AutoGPT SSRF via DNS Rebinding </h3> <p> <strong>CVE ID : </strong>CVE-2025-31490 <br> <strong>Published : </strong> April 14, 2025, 11:15 p.m. | 7 hours ago <br> <strong>Description : </strong>AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to 0.6.1, AutoGPT allows SSRF due to DNS Rebinding in requests wrapper. AutoGPT is built with a wrapper around Python's requests library, hardening the application against SSRF. The code for this wrapper can be found in autogpt_platform/backend/backend/util/request.py. The requested hostname of a URL which is being requested is validated, ensuring that it does not resolve to any local ipv4 or ipv6 addresses. However, this check is not sufficient, as a DNS server may initially respond with a non-blocked address, with a TTL of 0. This means that the initial resolution would appear as a non-blocked address. In this case, validate_url() will return the url as successful. After validate_url() has successfully returned the url, the url is then passed to the real request() function. When the real request() function is called with the validated url, request() will once again resolve the address of the hostname, because the record will not have been cached (due to TTL 0). This resolution may be in the "invalid range". This type of attack is called a "DNS Rebinding Attack". This vulnerability is fixed in 0.6.1. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31490"> read more </a> </article> <hr> <article> <h3> CVE-2025-3593 - ZHENFENG13 My-Blog-layui Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3593 <br> <strong>Published : </strong> April 14, 2025, 11:15 p.m. | 7 hours ago <br> <strong>Description : </strong>A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3593"> read more </a> </article> <hr> <article> <h3> CVE-2025-3592 - ZHENFENG13 My-Blog-layui Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3592 <br> <strong>Published : </strong> April 14, 2025, 10:15 p.m. | 8 hours ago <br> <strong>Description : </strong>A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3592"> read more </a> </article> <hr> <article> <h3> CVE-2025-3590 - Adianti Framework Remote Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3590 <br> <strong>Published : </strong> April 14, 2025, 10:15 p.m. | 6 hours ago <br> <strong>Description : </strong>A vulnerability has been found in Adianti Framework up to 8.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.1 is able to address this issue. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3590"> read more </a> </article> <hr> <article> <h3> CVE-2025-3591 - ZHENFENG13/My-Blog-layui Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3591 <br> <strong>Published : </strong> April 14, 2025, 10:15 p.m. | 6 hours ago <br> <strong>Description : </strong>A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3591"> read more </a> </article> <hr> <article> <h3> CVE-2022-43840 - IBM Aspera Console XPath Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-43840 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43840"> read more </a> </article> <hr> <article> <h3> CVE-2022-43847 - IBM Aspera Console HTTP Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-43847 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43847"> read more </a> </article> <hr> <article> <h3> CVE-2022-43850 - IBM Aspera Console Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2022-43850 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43850"> read more </a> </article> <hr> <article> <h3> CVE-2022-43851 - IBM Aspera Console Cryptographic Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2022-43851 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43851"> read more </a> </article> <hr> <article> <h3> CVE-2022-43852 - IBM Aspera Console Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2022-43852 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2022-43852"> read more </a> </article> <hr> <article> <h3> CVE-2023-27272 - IBM Aspera Console Password Reuse Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-27272 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-27272"> read more </a> </article> <hr> <article> <h3> CVE-2025-3588 - "JSONschema2pojo JSON File Handler Stack-Based Buffer Overflow" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3588 <br> <strong>Published : </strong> April 14, 2025, 9:15 p.m. | 5 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3588"> read more </a> </article> <hr> <article> <h3> CVE-2025-3587 - ZeroWdd/Code-Projects StudentManager Remote Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3587 <br> <strong>Published : </strong> April 14, 2025, 8:15 p.m. | 6 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3587"> read more </a> </article> <hr> <article> <h3> CVE-2025-1782 - HylaFAX Enterprise Web Interface and AvantFAX File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1782 <br> <strong>Published : </strong> April 14, 2025, 7:15 p.m. | 7 hours ago <br> <strong>Description : </strong>In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1782"> read more </a> </article> <hr> <article> <h3> CVE-2025-3585 - Westboy CicadasCMS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3585 <br> <strong>Published : </strong> April 14, 2025, 6:15 p.m. | 8 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /upload/ of the component JSP Parser. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3585"> read more </a> </article> <hr> <article> <h3> CVE-2025-29720 - Dify SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-29720 <br> <strong>Published : </strong> April 14, 2025, 5:15 p.m. | 9 hours ago <br> <strong>Description : </strong>Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29720"> read more </a> </article> <hr> <article> <h3> CVE-2025-3277 - SQLite Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3277 <br> <strong>Published : </strong> April 14, 2025, 5:15 p.m. | 9 hours ago <br> <strong>Description : </strong>An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3277"> read more </a> </article> <hr> <article> <h3> CVE-2025-22373 - SicommNet BASEC Web Page Generation Vulnerability (Cross-site Scripting) </h3> <p> <strong>CVE ID : </strong>CVE-2025-22373 <br> <strong>Published : </strong> April 14, 2025, 4:15 p.m. | 10 hours ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22373"> read more </a> </article> <hr> <article> <h3> CVE-2025-2572 - WhatsUp Gold Database Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2572 <br> <strong>Published : </strong> April 14, 2025, 4:15 p.m. | 10 hours ago <br> <strong>Description : </strong>In WhatsUp Gold versions released before 2024.0.3, a database manipulation vulnerability allows an unauthenticated attacker to modify the contents of WhatsUp.dbo.WrlsMacAddressGroup. <br> <strong>Severity:</strong> 5.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2572"> read more </a> </article> <hr> <article> <h3> CVE-2025-32931 - DevDojo Voyager Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32931 <br> <strong>Published : </strong> April 14, 2025, 4:15 p.m. | 10 hours ago <br> <strong>Description : </strong>DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands via a specific php artisan command. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32931"> read more </a> </article> <hr> <article> <h3> CVE-2025-3543 - H3C Magic NX Series HTTP POST Request Handler Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3543 <br> <strong>Published : </strong> April 14, 2025, 1:15 a.m. | 7 hours ago <br> <strong>Description : </strong>A vulnerability has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014 and classified as critical. This vulnerability affects the function FCGI_WizardProtoProcess of the file /api/wizard/setsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3543"> read more </a> </article> <hr> <article> <h3> CVE-2025-3544 - H3C Magic NX15/30 Pro/400/BE18000 HTTP POST Request Handler Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3544 <br> <strong>Published : </strong> April 14, 2025, 1:15 a.m. | 7 hours ago <br> <strong>Description : </strong>A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3544"> read more </a> </article> <hr> <article> <h3> CVE-2025-3542 - H3C Magic NX15, Magic NX400 and Magic R3010 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3542 <br> <strong>Published : </strong> April 14, 2025, 12:15 a.m. | 8 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 14 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3542"> read more </a> </article> <hr> <article> <h3> CVE-2025-3540 - H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3540 <br> <strong>Published : </strong> April 13, 2025, 11:15 p.m. | 9 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGI_WizardProtoProcess of the file /api/wizard/getCapability of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3540"> read more </a> </article> <hr> <article> <h3> CVE-2025-3541 - H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3541 <br> <strong>Published : </strong> April 13, 2025, 11:15 p.m. | 9 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGI_WizardProtoProcess of the file /api/wizard/getSpecs of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3541"> read more </a> </article> <hr> <article> <h3> CVE-2025-3445 - Apache Archiver Path Traversal Zip Slip Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3445 <br> <strong>Published : </strong> April 13, 2025, 10:15 p.m. | 10 hours ago <br> <strong>Description : </strong>A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the archiver.Unarchive functionality with ZIP files, like this: archiver.Unarchive(zipFile, outputDir), A crafted ZIP file can be extracted in such a way that it writes files to the affected system with the same privileges as the application executing this vulnerable functionality. Consequently, sensitive files may be overwritten, potentially leading to privilege escalation, code execution, and other severe outcomes in some cases. It's worth noting that a similar vulnerability was found in TAR files (CVE-2024-0406). Although a fix was implemented, it hasn't been officially released, and the affected project has since been deprecated. The successor to mholt/archiver is a new project called mholt/archives, and its initial release (v0.1.0) removes the Unarchive() functionality. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3445"> read more </a> </article> <hr> <article> <h3> CVE-2025-3539 - H3C Magic NX Series HCF CGI Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3539 <br> <strong>Published : </strong> April 13, 2025, 10:15 p.m. | 10 hours ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 8.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3539"> read more </a> </article> <hr> <article> <h3> CVE-2025-3538 - D-Link jhttpd Auth Asp Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3538 <br> <strong>Published : </strong> April 13, 2025, 7:15 p.m. | 13 hours ago <br> <strong>Description : </strong>A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3538"> read more </a> </article> <hr> <article> <h3> CVE-2024-56406 - Perl Heap Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56406 <br> <strong>Published : </strong> April 13, 2025, 2:15 p.m. | 18 hours ago <br> <strong>Description : </strong>A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56406"> read more </a> </article> <hr> <article> <h3> CVE-2025-3423 - IBM Aspera Faspex Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3423 <br> <strong>Published : </strong> April 13, 2025, 12:15 p.m. | 17 hours, 54 minutes ago <br> <strong>Description : </strong>IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3423"> read more </a> </article> <hr> <article> <h3> CVE-2025-3536 - Tutorials-Website Employee Management System Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3536 <br> <strong>Published : </strong> April 13, 2025, 12:15 p.m. | 17 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3536"> read more </a> </article> <hr> <article> <h3> CVE-2025-3537 - Tutorials-Website Employee Management System Remote Unauthorized File Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3537 <br> <strong>Published : </strong> April 13, 2025, 12:15 p.m. | 17 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3537"> read more </a> </article> <hr> <article> <h3> CVE-2025-3534 - PowerCreator CMS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3534 <br> <strong>Published : </strong> April 13, 2025, 11:15 a.m. | 18 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PowerCreator CMS 1.0. Affected is an unknown function of the file /OpenPublicCourse.aspx. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3534"> read more </a> </article> <hr> <article> <h3> CVE-2025-3535 - Shuanx BurpAPIFinder Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3535 <br> <strong>Published : </strong> April 13, 2025, 11:15 a.m. | 18 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in shuanx BurpAPIFinder up to 2.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3535"> read more </a> </article> <hr> <article> <h3> CVE-2025-3533 - YouDianCMS Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3533 <br> <strong>Published : </strong> April 13, 2025, 10:15 a.m. | 19 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3533"> read more </a> </article> <hr> <article> <h3> CVE-2025-3531 - YouDianCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3531 <br> <strong>Published : </strong> April 13, 2025, 6:15 a.m. | 23 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3531"> read more </a> </article> <hr> <article> <h3> CVE-2025-3532 - YouDianCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3532 <br> <strong>Published : </strong> April 13, 2025, 6:15 a.m. | 23 hours, 54 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3532"> read more </a> </article> <hr> <article> <h3> CVE-2025-2814 - "Verisign Crypt::CBC Insecure Random Number Generation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2814 <br> <strong>Published : </strong> April 13, 2025, 12:15 a.m. | 1 day, 2 hours ago <br> <strong>Description : </strong>Crypt::CBC versions between 1.21 and 3.04 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to use the insecure rand() function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 13 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2814"> read more </a> </article> <hr> <article> <h3> CVE-2025-1455 - WordPress Royal Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1455 <br> <strong>Published : </strong> April 12, 2025, 9:15 a.m. | 1 day, 17 hours ago <br> <strong>Description : </strong>The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Woo Grid widget in all versions up to, and including, 1.7.1012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1455"> read more </a> </article> <hr> <article> <h3> CVE-2025-1456 - Elementor Royal Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1456 <br> <strong>Published : </strong> April 12, 2025, 9:15 a.m. | 1 day, 17 hours ago <br> <strong>Description : </strong>The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `widgetGrid`, `widgetCountDown`, and `widgetInstagramFeed` methods in all versions up to, and including, 1.7.1012 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1456"> read more </a> </article> <hr> <article> <h3> CVE-2024-13338 - Clearfy Cache - WordPress CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2024-13338 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the wclearfy_cache_delete functionality . This makes it possible for unauthenticated attackers to clear the cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13338"> read more </a> </article> <hr> <article> <h3> CVE-2025-3276 - SKT Blocks - WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3276 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3276"> read more </a> </article> <hr> <article> <h3> CVE-2025-3282 - WordPress User Registration Membership Insecure Direct Object Reference </h3> <p> <strong>CVE ID : </strong>CVE-2025-3282 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the user_registration_membership_register_member() due to missing validation on the 'membership_id' user controlled key. This makes it possible for unauthenticated attackers to update any user's membership to any other active or non-active membership type. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3282"> read more </a> </article> <hr> <article> <h3> CVE-2025-3292 - WordPress User Registration Membership Insecure Direct Object Reference (IDOR) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3292 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the user_registration_update_profile_details() due to missing validation on the 'user_id' user controlled key. This makes it possible for unauthenticated attackers to update other user's passwords, if they have access to the user ID and email. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3292"> read more </a> </article> <hr> <article> <h3> CVE-2025-3418 - WordPress WPC Admin Columns Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3418 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>The WPC Admin Columns plugin for WordPress is vulnerable to privilege escalation in versions 2.0.6 to 2.1.0. This is due to the plugin not properly restricting user meta values that can be updated through the ajax_edit_save() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to that of an administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3418"> read more </a> </article> <hr> <article> <h3> CVE-2024-13337 - Clearfy Cache – WordPress optimization plugin Cross-Site Request Forgery (CSRF) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13337 <br> <strong>Published : </strong> April 12, 2025, 7:15 a.m. | 20 hours, 57 minutes ago <br> <strong>Description : </strong>The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.2. This is due to missing or incorrect nonce validation on the 'setup-wbcr_clearfy' page. This makes it possible for unauthenticated attackers to update the plugins settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13337"> read more </a> </article> <hr> <article> <h3> CVE-2025-2871 - "QuadMenu Cross-Site Request Forgery (CSRF) Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2871 <br> <strong>Published : </strong> April 12, 2025, 4:15 a.m. | 1 day, 19 hours ago <br> <strong>Description : </strong>The WordPress Mega Menu – QuadMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the ajax_dismiss_notice() function. This makes it possible for unauthenticated attackers to update any user meta to a value of one, including wp_capabilities which could result in a privilege deescalation of an administrator, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2871"> read more </a> </article> <hr> <article> <h3> CVE-2025-2881 - "WordPress Developer Toolbar Sensitive Information Exposure" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2881 <br> <strong>Published : </strong> April 12, 2025, 3:15 a.m. | 1 day, 21 hours ago <br> <strong>Description : </strong>The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2881"> read more </a> </article> <hr> <article> <h3> CVE-2025-2841 - Cart66 Cloud WordPress Sensitive Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2841 <br> <strong>Published : </strong> April 12, 2025, 3:15 a.m. | 1 day, 10 hours ago <br> <strong>Description : </strong>The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.7 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2841"> read more </a> </article> <hr> <article> <h3> CVE-2025-29803 - Microsoft SQL Server Management Studio Path Traversal Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-29803 <br> <strong>Published : </strong> April 12, 2025, 2:15 a.m. | 1 day, 11 hours ago <br> <strong>Description : </strong>Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29803"> read more </a> </article> <hr> <article> <h3> CVE-2025-29834 - Microsoft Edge (Chromium-based) Out-of-bounds Read Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-29834 <br> <strong>Published : </strong> April 12, 2025, 2:15 a.m. | 1 day, 11 hours ago <br> <strong>Description : </strong>Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29834"> read more </a> </article> <hr> <article> <h3> CVE-2025-32726 - Visual Studio Code Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32726 <br> <strong>Published : </strong> April 12, 2025, 2:15 a.m. | 1 day, 11 hours ago <br> <strong>Description : </strong>Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32726"> read more </a> </article> <hr> <article> <h3> CVE-2025-2269 - 10Web Photo Gallery by 10Web Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2269 <br> <strong>Published : </strong> April 12, 2025, 12:15 a.m. | 1 day, 13 hours ago <br> <strong>Description : </strong>The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘image_id’ parameter in all versions up to, and including, 1.8.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 12 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2269"> read more </a> </article> <hr> <article> <h3> CVE-2025-0129 - Prisma Access Browser: Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-0129 <br> <strong>Published : </strong> April 11, 2025, 11:15 p.m. | 1 day, 14 hours ago <br> <strong>Description : </strong>Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0129"> read more </a> </article> <hr> <article> <h3> CVE-2024-11679 - IBM System x Server Memory Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11679 <br> <strong>Published : </strong> April 11, 2025, 7:15 p.m. | 1 day, 17 hours ago <br> <strong>Description : </strong>An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privileges to read the contents of memory. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11679"> read more </a> </article> <hr> <article> <h3> CVE-2025-0119 - Palo Alto Networks Cortex XDR Broker VM Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0119 <br> <strong>Published : </strong> April 11, 2025, 6:15 p.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0119"> read more </a> </article> <hr> <article> <h3> CVE-2025-0123 - Palo Alto Networks PAN-OS Unauthorized Access to Decrypted Packet Captures </h3> <p> <strong>CVE ID : </strong>CVE-2025-0123 <br> <strong>Published : </strong> April 11, 2025, 6:15 p.m. | 1 day, 18 hours ago <br> <strong>Description : </strong>A vulnerability in the Palo Alto Networks PAN-OS® software enables unlicensed administrators to view clear-text data captured using the packet capture feature https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/take-packet-captures/take-a-custom-packet-capture in decrypted HTTP/2 data streams traversing network interfaces on the firewall. HTTP/1.1 data streams are not impacted. In normal conditions, decrypted packet captures are available to firewall administrators after they obtain and install a free Decryption Port Mirror license. The license requirement ensures that this feature can only be used after approved personnel purposefully activate the license. For more information, review how to configure decryption port mirroring https://docs.paloaltonetworks.com/network-security/decryption/administration/monitoring-decryption/configure-decryption-port-mirroring . The administrator must obtain network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. Risk of this issue can be greatly reduced by restricting access to the management interface to only trusted administrators and from only internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Customer firewall administrators do not have access to the packet capture feature in Cloud NGFW. This feature is available only to authorized Palo Alto Networks personnel permitted to perform troubleshooting. Prisma® Access is not impacted by this vulnerability. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0123"> read more </a> </article> <hr> <article> <h3> CVE-2025-32079 - Wikimedia Mediawiki GrowthExperiments HTTP Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32079 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 1 day, 16 hours ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments allows HTTP DoS.This issue affects Mediawiki - GrowthExperiments: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32079"> read more </a> </article> <hr> <article> <h3> CVE-2025-32080 - Wikimedia Foundation Mediawiki Mobile Frontend Extension Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32080 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 1 day, 16 hours ago <br> <strong>Description : </strong>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Mobile Frontend Extension allows Shared Resource Manipulation.This issue affects Mediawiki - Mobile Frontend Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32080"> read more </a> </article> <hr> <article> <h3> CVE-2025-32367 - Oz Forensics Face Recognition IDOR </h3> <p> <strong>CVE ID : </strong>CVE-2025-32367 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 1 day, 16 hours ago <br> <strong>Description : </strong>The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32367"> read more </a> </article> <hr> <article> <h3> CVE-2025-32077 - WikiMedia SimpleCalendar XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-32077 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32077"> read more </a> </article> <hr> <article> <h3> CVE-2025-32078 - Wikimedia Mediawiki Version Compare Extension XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-32078 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 1 day, 12 hours ago <br> <strong>Description : </strong>Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Version Compare Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Version Compare Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32078"> read more </a> </article> <hr> <article> <h3> CVE-2025-32076 - Wikimedia Mediawiki Visual Data Extension HTTP DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32076 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 18 hours, 52 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32076"> read more </a> </article> <hr> <article> <h3> CVE-2025-32067 - Wikimedia Mediawiki Growth Experiments XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-32067 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 14 hours, 52 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Growth Experiments Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32067"> read more </a> </article> <hr> <article> <h3> CVE-2025-32068 - Wikimedia Foundation Mediawiki OAuth Extension Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-32068 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 14 hours, 52 minutes ago <br> <strong>Description : </strong>Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 8.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32068"> read more </a> </article> <hr> <article> <h3> CVE-2025-32069 - "Wikimedia Mediawiki Wikibase Media Info Extension Cross-Site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-32069 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32069"> read more </a> </article> <hr> <article> <h3> CVE-2025-32070 - Wikimedia Mediawiki AJAX Poll Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32070 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32070"> read more </a> </article> <hr> <article> <h3> CVE-2025-32071 - Wikimedia Mediawiki Wikidata Extension Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32071 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32071"> read more </a> </article> <hr> <article> <h3> CVE-2025-32072 - Wikimedia Mediawiki Core Feed Utils XML External Entity (XXE) Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-32072 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32072"> read more </a> </article> <hr> <article> <h3> CVE-2025-32073 - Wikimedia Mediawiki HTML Tags Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-32073 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (XSS).This issue affects Mediawiki - HTML Tags: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32073"> read more </a> </article> <hr> <article> <h3> CVE-2025-32074 - Wikimedia Mediawiki Confirm Account Extension XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-32074 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Confirm Account Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32074"> read more </a> </article> <hr> <article> <h3> CVE-2025-32075 - WikiMedia Foundation Mediawiki Tabs Extension Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32075 <br> <strong>Published : </strong> April 11, 2025, 5:15 p.m. | 9 hours, 13 minutes ago <br> <strong>Description : </strong>Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32075"> read more </a> </article> <hr> <article> <h3> CVE-2025-31354 - Subnet Solutions PowerSYSTEM Center ECDSA Signature Validation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31354 <br> <strong>Published : </strong> April 11, 2025, 4:15 p.m. | 10 hours, 13 minutes ago <br> <strong>Description : </strong>Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31354"> read more </a> </article> <hr> <article> <h3> CVE-2025-31935 - Subnet Solutions PowerSYSTEM Center Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31935 <br> <strong>Published : </strong> April 11, 2025, 4:15 p.m. | 10 hours, 13 minutes ago <br> <strong>Description : </strong>Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31935"> read more </a> </article> <hr> <article> <h3> CVE-2023-42981 - Apple macOS File Processing Denial-of-Service and Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-42981 <br> <strong>Published : </strong> April 11, 2025, 3:15 p.m. | 11 hours, 13 minutes ago <br> <strong>Description : </strong>Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-42981"> read more </a> </article> <hr> <article> <h3> CVE-2023-42982 - Apple macOS File Processing Denial-of-Service/Memory Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2023-42982 <br> <strong>Published : </strong> April 11, 2025, 3:15 p.m. | 11 hours, 13 minutes ago <br> <strong>Description : </strong>Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-42982"> read more </a> </article> <hr> <article> <h3> CVE-2023-42983 - Apple macOS File Processing Denial-of-Service/Memory Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-42983 <br> <strong>Published : </strong> April 11, 2025, 3:15 p.m. | 11 hours, 13 minutes ago <br> <strong>Description : </strong>Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 11 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-42983"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Harvest </h3> <p>gestion de patrimoine</p> <p class="feed-time"> Fri Apr 11 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Harvest-2025-04-11"> read more </a> </article> <hr> <article> <h3> CVE-2024-10894 - Paystack WordPress Payment Forms Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-10894 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'datepicker', 'textarea', and 'text' in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-10894"> read more </a> </article> <hr> <article> <h3> CVE-2024-13874 - Feedify WordPress Plugin Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13874 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The Feedify WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13874"> read more </a> </article> <hr> <article> <h3> CVE-2024-13896 - WordPress WP-GeSHi-Highlight Regular Expression Denial of Service (ReDoS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-13896 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wp_geshi_filter_replace_code() function, which could lead to Regular Expression Denial of Service (ReDoS) issue <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13896"> read more </a> </article> <hr> <article> <h3> CVE-2024-13909 - "Accredible Certificates Open Badges WordPress SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13909 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The Accredible Certificates & Open Badges plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13909"> read more </a> </article> <hr> <article> <h3> CVE-2025-2719 - Swatchly – WooCommerce Variation Swatches Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2719 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in versions 1.2.8 to 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2719"> read more </a> </article> <hr> <article> <h3> CVE-2025-2805 - WordPress ORDER POST Arbitrary Shortcode Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2805 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The ORDER POST plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2805"> read more </a> </article> <hr> <article> <h3> CVE-2025-2809 - Azurecurve Shortcodes in Comments Plugin Arbitrary Shortcode Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2809 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The azurecurve Shortcodes in Comments plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2809"> read more </a> </article> <hr> <article> <h3> CVE-2025-3417 - WordPress Embedder Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3417 <br> <strong>Published : </strong> April 10, 2025, 7:15 a.m. | 1 hour, 4 minutes ago <br> <strong>Description : </strong>The Embedder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_set_global_option() function in versions 1.3 to 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3417"> read more </a> </article> <hr> <article> <h3> CVE-2025-0539 - Microsoft Octopus Deploy Server-Side Request Forgery (SSRF) </h3> <p> <strong>CVE ID : </strong>CVE-2025-0539 <br> <strong>Published : </strong> April 10, 2025, 6:15 a.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0539"> read more </a> </article> <hr> <article> <h3> CVE-2025-3102 - WordPress SureTriggers Plugin Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3102 <br> <strong>Published : </strong> April 10, 2025, 5:15 a.m. | 3 hours, 4 minutes ago <br> <strong>Description : </strong>The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3102"> read more </a> </article> <hr> <article> <h3> CVE-2025-3489 - Nababur Simple-User-Management-System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3489 <br> <strong>Published : </strong> April 10, 2025, 4:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3489"> read more </a> </article> <hr> <article> <h3> CVE-2024-58136 - Yii 2 Behavior Array Key Attachment Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-58136 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58136"> read more </a> </article> <hr> <article> <h3> CVE-2025-22471 - Dell PowerScale OneFS Integer Overflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-22471 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22471"> read more </a> </article> <hr> <article> <h3> CVE-2025-23378 - Dell PowerScale OneFS Directory Listing Information Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-23378 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an exposure of information through directory listing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23378"> read more </a> </article> <hr> <article> <h3> CVE-2025-26330 - Dell PowerScale OneFS Local Privilege Escalation Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-26330 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability to access the cluster with previous privileges of a disabled user account. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26330"> read more </a> </article> <hr> <article> <h3> CVE-2025-26479 - Dell PowerScale OneFS Out-of-Bounds Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26479 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26479"> read more </a> </article> <hr> <article> <h3> CVE-2025-26480 - Dell PowerScale OneFS Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26480 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.0, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26480"> read more </a> </article> <hr> <article> <h3> CVE-2025-27690 - Dell PowerScale OneFS Default Password Vulnerability (Remote Authentication Bypass) </h3> <p> <strong>CVE ID : </strong>CVE-2025-27690 <br> <strong>Published : </strong> April 10, 2025, 3:15 a.m. | 5 hours, 5 minutes ago <br> <strong>Description : </strong>Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to the takeover of a high privileged user account. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27690"> read more </a> </article> <hr> <article> <h3> CVE-2025-29989 - Dell Client Platform BIOS Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29989 <br> <strong>Published : </strong> April 9, 2025, 9:16 p.m. | 9 hours, 3 minutes ago <br> <strong>Description : </strong>Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 10 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29989"> read more </a> </article> <hr> <article> <h3> CVE-2025-30653 - Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (rpd) Expired Pointer Dereference Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-30653 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Expired Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service (DoS).On all Junos OS and Junos OS Evolved platforms, when an MPLS Label-Switched Path (LSP) is configured with node-link-protection and transport-class, and an LSP flaps, rpd crashes and restarts. Continuous flapping of LSP can cause a sustained Denial of Service (DoS) condition. This issue affects: Junos OS: * All versions before 22.2R3-S4, * 22.4 versions before 22.4R3-S2, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2. Junos OS Evolved: * All versions before 22.2R3-S4-EVO, * 22.4-EVO versions before 22.4R3-S2-EVO, * 23.2-EVO versions before 23.2R2-EVO, * 23.4-EVO versions before 23.4R2-EVO. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30653"> read more </a> </article> <hr> <article> <h3> CVE-2025-30654 - Juniper Networks Junos OS and Junos OS Evolved Sensitive Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-30654 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific show mgd command, a user with limited permissions (e.g., a low-privileged login class user) can access sensitive information such as hashed passwords, that can be used to further impact the system. This issue affects Junos OS: * All versions before 21.4R3-S10, * from 22.2 before 22.2R3-S5, * from 22.4 before 22.4R3-S5, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S3. Junos OS Evolved: * All versions before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S5-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-S3-EVO. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30654"> read more </a> </article> <hr> <article> <h3> CVE-2025-30655 - Juniper Networks Junos OS/Junos OS Evolved BGP RPD Denial-of-Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30655 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to cause a Denial-of-Service (DoS). When a specific "show bgp neighbor" CLI command is run, the rpd cpu utilization rises and eventually causes a crash and restart. Repeated use of this command will cause a sustained DoS condition. The device is only affected if BGP RIB sharding and update-threading is enabled. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S8, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2. and Junos OS Evolved: * All versions before 21.2R3-S9-EVO, * from 21.4-EVO before 21.4R3-S8-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S2-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-EVO. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30655"> read more </a> </article> <hr> <article> <h3> CVE-2025-30656 - Juniper Junos OS Packet Forwarding Engine Denial-of-Service Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-30656 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and SRX Series, allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If the SIP ALG processes specifically formatted SIP invites, a memory corruption will occur which will lead to a crash of the FPC processing these packets. Although the system will automatically recover with the restart of the FPC, subsequent SIP invites will cause the crash again and lead to a sustained DoS. This issue affects Junos OS on MX Series and SRX Series: * all versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S3, * 24.2 versions before 24.2R1-S2, 24.2R2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30656"> read more </a> </article> <hr> <article> <h3> CVE-2025-30657 - Juniper Networks Junos OS Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30657 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Improper Encoding or Escaping of Output vulnerability in the Sampling Route Record Daemon (SRRD) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a device configured for flow-monitoring receives a specific BGP update message, it is correctly processed internally by the routing protocol daemon (rpd), but when it's sent to SRRD it's encoded incorrectly which leads to a crash and momentary interruption of jflow processing until it automatically restarts. This issue does not affect traffic forwarding itself. This issue affects Junos OS: * All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R1-S2, 23.2R2. This issue does not affected Junos OS Evolved. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30657"> read more </a> </article> <hr> <article> <h3> CVE-2025-30658 - Juniper Networks Junos OS SRX Series Anti-Virus Memory Leak Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30658 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>A Missing Release of Memory after Effective Lifetime vulnerability in the Anti-Virus processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On all SRX platforms with Anti-Virus enabled, if a server sends specific content in the HTTP body of a response to a client request, these packets are queued by Anti-Virus processing in Juniper Buffers (jbufs) which are never released. When these jbufs are exhausted, the device stops forwarding all transit traffic. A jbuf memory leak can be noticed from the following logs: (<node>.)<fpc> Warning: jbuf pool id <#> utilization level (<current level>%) is above <threshold>%! To recover from this issue, the affected device needs to be manually rebooted to free the leaked jbufs. This issue affects Junos OS on SRX Series: * all versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S3, * 24.2 versions before 24.2R2. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30658"> read more </a> </article> <hr> <article> <h3> CVE-2025-30659 - Juniper Networks Junos OS SRX Series Denial-of-Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30659 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a device configured for Secure Vector Routing (SVR) receives a specifically malformed packet the PFE will crash and restart. This issue affects Junos OS on SRX Series: * All 21.4 versions, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R2. This issue does not affect versions before 21.4. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30659"> read more </a> </article> <hr> <article> <h3> CVE-2025-30660 - Juniper Networks Junos OS GRE Traffic Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30660 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 10 hours, 4 minutes ago <br> <strong>Description : </strong>An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).When processing a high rate of specific GRE traffic destined to the device, the respective PFE will hang causing traffic forwarding to stop. When this issue occurs the following logs can be observed: <fpc #> MQSS(0): LI-3: Received a parcel with more than 512B accompanying data CHASSISD_FPC_ASIC_ERROR: ASIC Error detected <...> This issue affects Junos OS: * all versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S8, * 22.2 versions before 22.2R3-S4, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S2, * 23.4 versions before 23.4R2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30660"> read more </a> </article> <hr> <article> <h3> CVE-2025-2632 - NI LabVIEW CPU Info Disclosure and Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-2632 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW reading CPU info from cache that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2632"> read more </a> </article> <hr> <article> <h3> CVE-2025-30644 - Juniper Networks Junos OS Flexible PIC Concentrator Remote Code Execution and Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30644 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4400, EX4600, EX4650-48Y, and QFX5k Series allows an attacker to send a specific DHCP packet to the device, leading to an FPC crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Under a rare timing scenario outside the attacker's control, memory corruption may be observed when DHCP Option 82 is enabled, leading to an FPC crash and affecting packet forwarding. Due to the nature of the heap-based overflow, exploitation of this vulnerability could also lead to remote code execution within the FPC, resulting in complete control of the vulnerable component. This issue affects Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4400, EX4600, EX4650-48Y, and QFX5k Series: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5, * from 22.4 before 22.4R3-S5, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S3, * from 24.2 before 24.2R2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30644"> read more </a> </article> <hr> <article> <h3> CVE-2025-30645 - Juniper Networks Junos OS SRX Series NULL Pointer Dereference Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30645 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 6 hours, 43 minutes ago <br> <strong>Description : </strong>A NULL Pointer Dereference vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker causing specific, valid control traffic to be sent out of a Dual-Stack (DS) Lite tunnel to crash the flowd process, resulting in a Denial of Service (DoS). Continuous triggering of specific control traffic will create a sustained Denial of Service (DoS) condition. On all SRX platforms, when specific, valid control traffic needs to be sent out of a DS-Lite tunnel, a segmentation fault occurs within the flowd process, resulting in a network outage until the flowd process restarts. This issue affects Junos OS on SRX Series: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S9, * from 22.2 before 22.2R3-S5, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30645"> read more </a> </article> <hr> <article> <h3> CVE-2025-30646 - Juniper Networks Junos OS and Junos OS Evolved LLDP Signed to Unsigned Conversion Error Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30646 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon (l2cpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated adjacent attacker sending a specifically malformed LLDP TLV to cause the l2cpd process to crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. When an LLDP telemetry subscription is active, receipt of a specifically malformed LLDP TLV causes the l2cpd process to crash and restart. This issue affects: Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R2; Junos OS Evolved: * All versions before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S6-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-S4-EVO, * from 24.2-EVO before 24.2R2-EVO. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30646"> read more </a> </article> <hr> <article> <h3> CVE-2025-30647 - Juniper Networks Junos OS MX Series Memory Leak DoS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30647 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). In a subscriber management scenario, login/logout activity triggers a memory leak, and the leaked memory gradually increments and eventually results in a crash. user@host> show chassis fpc Temp CPU Utilization (%) CPU Utilization (%) Memory Utilization (%) Slot State (C) Total Interrupt 1min 5min 15min DRAM (MB) Heap Buffer 2 Online 36 10 0 9 8 9 32768 26 0 This issue affects Junos OS on MX Series: * All versions before 21.2R3-S9 * from 21.4 before 21.4R3-S10 * from 22.2 before 22.2R3-S6 * from 22.4 before 22.4R3-S5 * from 23.2 before 23.2R2-S3 * from 23.4 before 23.4R2-S3 * from 24.2 before 24.2R2. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30647"> read more </a> </article> <hr> <article> <h3> CVE-2025-30648 - Juniper Junos OS Juniper DHCP Daemon Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30648 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause the jdhcpd process to crash resulting in a Denial of Service (DoS). When a specifically malformed DHCP packet is received from a DHCP client, the jdhcpd process crashes, which will lead to the unavailability of the DHCP service and thereby resulting in a sustained DoS. The DHCP process will restart automatically to recover the service. This issue will occur when dhcp-security is enabled. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R2; Junos OS Evolved: * from 22.4 before 22.4R3-S6-EVO, * from 23.2 before 23.2R2-S3-EVO, * from 23.4 before 23.4R2-S4-EVO, * from 24.2 before 24.2R2-EVO. . <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30648"> read more </a> </article> <hr> <article> <h3> CVE-2025-30649 - "Juniper Networks Junos OS syslog stream TCP transport Improper Input Validation allows CPU Denial of Service" </h3> <p> <strong>CVE ID : </strong>CVE-2025-30649 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card allows an unauthenticated, network-based attacker, to send specific spoofed packets to cause a CPU Denial of Service (DoS) to the MX-SPC3 SPUs. Continued receipt and processing of these specific packets will sustain the DoS condition. This issue affects Junos OS: * All versions before 22.2R3-S6, * from 22.4 before 22.4R3-S4, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R1-S2, 24.2R2 An indicator of compromise will indicate the SPC3 SPUs utilization has spiked. For example: user@device> show services service-sets summary Service sets CPU Interface configured Bytes used Session bytes used Policy bytes used utilization "interface" 1 "bytes" (percent%) "sessions" ("percent"%) "bytes" ("percent"%) 99.97 % OVLD <<<<<< look for high CPU usage <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30649"> read more </a> </article> <hr> <article> <h3> CVE-2025-30651 - Juniper Networks Junos OS and Junos OS Evolved Router Advertisement Protocol Buffer Access Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30651 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When an attacker sends a specific ICMPv6 packet to an interface with "protocols router-advertisement" configured, rpd crashes and restarts. Continued receipt of this packet will cause a sustained DoS condition. This issue only affects systems configured with IPv6. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S4, * from 23.2 before 23.2R2-S2, * from 23.4 before 23.4R2; and Junos OS Evolved: * All versions before 21.2R3-S9-EVO, * from 21.4-EVO before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S4-EVO, * from 23.2-EVO before 23.2R2-S2-EVO, * from 23.4-EVO before 23.4R2-EVO. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30651"> read more </a> </article> <hr> <article> <h3> CVE-2025-30652 - Juniper Networks Junos OS and Junos OS Evolved Denial of Service Vulnerability in Routing Protocol Daemon (rpd) </h3> <p> <strong>CVE ID : </strong>CVE-2025-30652 <br> <strong>Published : </strong> April 9, 2025, 8:15 p.m. | 8 hours, 3 minutes ago <br> <strong>Description : </strong>An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service (DoS). When asregex-optimized is configured and a specific "show route as-path" CLI command is executed, the rpd crashes and restarts. Repeated execution of this command will cause a sustained DoS condition. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R2. and Junos OS Evolved: * All versions before 21.2R3-S9-EVO, * from 21.4-EVO before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S6-EVO, * from 23.2-EVO before 23.2R2-S3-EVO, * from 23.4-EVO before 23.4R2-S4-EVO, * from 24.2-EVO before 24.2R2-EVO. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 09 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30652"> read more </a> </article> <hr> <article> <h3> CVE-2025-2519 - Sreamit WordPress Arbitrary File Download Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2519 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary files. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2519"> read more </a> </article> <hr> <article> <h3> CVE-2025-2525 - Streamit for WordPress Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2525 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_Authentication_Controller::edit_profile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2525"> read more </a> </article> <hr> <article> <h3> CVE-2025-2526 - Streamit Theme for WordPress Privilege Escalation via Account Takeover </h3> <p> <strong>CVE ID : </strong>CVE-2025-2526 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email in the 'st_Authentication_Controller::edit_profile' function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2526"> read more </a> </article> <hr> <article> <h3> CVE-2025-3361 - HGiga iSherlock OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3361 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3361"> read more </a> </article> <hr> <article> <h3> CVE-2025-3362 - HGiga iSherlock OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3362 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3362"> read more </a> </article> <hr> <article> <h3> CVE-2025-3363 - HGiga iSherlock OS Command Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3363 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3363"> read more </a> </article> <hr> <article> <h3> CVE-2025-3392 - "Hailey888 OA System Backend MailController Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3392 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability was found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this issue is the function Save of the file cn/gson/oasys/controller/mail/MailController.java of the component Backend. The manipulation of the argument MailNumberId leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3392"> read more </a> </article> <hr> <article> <h3> CVE-2025-3393 - MRCEN Springboot-Ucan-Admin Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3393 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability was found in mrcen springboot-ucan-admin up to 5f35162032cbe9288a04e429ef35301545143509. It has been classified as problematic. This affects an unknown part of the file /ucan-admin/index of the component Personal Settings Interface. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3393"> read more </a> </article> <hr> <article> <h3> CVE-2025-3397 - YzmCMS Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3397 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3397"> read more </a> </article> <hr> <article> <h3> CVE-2025-3398 - Lenve VBlog Remote Web Security Config File Improper Access Controls Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3398 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3398"> read more </a> </article> <hr> <article> <h3> CVE-2025-3399 - ESAFENET CDG SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3399 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by this issue is some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3399"> read more </a> </article> <hr> <article> <h3> CVE-2025-3400 - ESAfENET CDG SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3400 <br> <strong>Published : </strong> April 8, 2025, 2:15 a.m. | 1 hour ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMailApplication.jsp. The manipulation of the argument typename leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3400"> read more </a> </article> <hr> <article> <h3> CVE-2025-3391 - Hailey888 Oa_System Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3391 <br> <strong>Published : </strong> April 8, 2025, 1:15 a.m. | 1 hour, 59 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3391"> read more </a> </article> <hr> <article> <h3> CVE-2025-3389 - Hailey888 Oa_system Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3389 <br> <strong>Published : </strong> April 8, 2025, 12:15 a.m. | 3 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in hailey888 oa_system up to 2025.01.01. This issue affects the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument menu leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3389"> read more </a> </article> <hr> <article> <h3> CVE-2025-3390 - "Hailey888 OA System Backend DaymanageController Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3390 <br> <strong>Published : </strong> April 8, 2025, 12:15 a.m. | 3 hours ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in hailey888 oa_system up to 2025.01.01. Affected is the function addandchangeday of the file cn/gson/oass/controller/daymanager/DaymanageController.java of the component Backend. The manipulation of the argument scheduleList leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 08 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3390"> read more </a> </article> <hr> <article> <h3> CVE-2025-3387 - Renrenio Renren-Security JSON Handler Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3387 <br> <strong>Published : </strong> April 7, 2025, 11:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in renrenio renren-security up to 5.4.0. This affects an unknown part of the component JSON Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3387"> read more </a> </article> <hr> <article> <h3> CVE-2025-3388 - Hailey888 OA System Frontend Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3388 <br> <strong>Published : </strong> April 7, 2025, 11:15 p.m. | 3 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3388"> read more </a> </article> <hr> <article> <h3> CVE-2025-0942 - Jalios JPlatform SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0942 <br> <strong>Published : </strong> April 7, 2025, 10:15 p.m. | 5 hours ago <br> <strong>Description : </strong>The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for authenticated administrative users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06. <br> <strong>Severity:</strong> 6.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0942"> read more </a> </article> <hr> <article> <h3> CVE-2025-32409 - Ratta SuperNote A6 X2 Nomad Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32409 <br> <strong>Published : </strong> April 7, 2025, 10:15 p.m. | 5 hours ago <br> <strong>Description : </strong>Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of concurrency. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32409"> read more </a> </article> <hr> <article> <h3> CVE-2025-3385 - LinZhaoguan pb-cms Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3385 <br> <strong>Published : </strong> April 7, 2025, 10:15 p.m. | 5 hours ago <br> <strong>Description : </strong>A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3385"> read more </a> </article> <hr> <article> <h3> CVE-2025-3386 - "LinZhaoguan pb-cms Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3386 <br> <strong>Published : </strong> April 7, 2025, 10:15 p.m. | 5 hours ago <br> <strong>Description : </strong>A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin#links of the component Friendship Link Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3386"> read more </a> </article> <hr> <article> <h3> CVE-2025-32033 - Apollo Router Core Unsigned Integer Wraparound Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32033 <br> <strong>Published : </strong> April 7, 2025, 9:15 p.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1.61.2 and 2.1.1, the operation limits plugin uses unsigned 32-bit integers to track limit counters (e.g. for a query's height). If a counter exceeded the maximum value for this data type (4,294,967,295), it wrapped around to 0, unintentionally allowing queries to bypass configured thresholds. This could occur for large queries if the payload limit were sufficiently increased, but could also occur for small queries with deeply nested and reused named fragments. This has been remediated in apollo-router versions 1.61.2 and 2.1.1. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32033"> read more </a> </article> <hr> <article> <h3> CVE-2025-32034 - Apollo Router Denial of Service (DoS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32034 <br> <strong>Published : </strong> April 7, 2025, 9:15 p.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1.61.2 and 2.1.1, a vulnerability in Apollo Router allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically during named fragment expansion. Named fragments were being expanded once per fragment spread during query planning, leading to exponential resource usage when deeply nested and reused fragments were involved. This could lead to excessive resource consumption and denial of service. This has been remediated in apollo-router versions 1.61.2 and 2.1.1. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32034"> read more </a> </article> <hr> <article> <h3> CVE-2025-3383 - SourceCodester Web-based Pharmacy Product Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3383 <br> <strong>Published : </strong> April 7, 2025, 9:15 p.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/search_sales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3383"> read more </a> </article> <hr> <article> <h3> CVE-2025-3384 - "1000 Projects Human Resource Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3384 <br> <strong>Published : </strong> April 7, 2025, 9:15 p.m. | 5 hours, 59 minutes ago <br> <strong>Description : </strong>A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3384"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr dévoile sa stratégie 2025-2030 </h3> <p><p>À l’occasion de la conférence de presse durant laquelle Cybermalveillance.gouv.fr a dévoilé son rapport d’activité et les tendances de la menace cyber en France, le dispositif national d’assistance a également présenté sa stratégie 2025-2030.</p> </p> <p class="feed-time"> Mon, 07 Apr 2025 17:25:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/strategie-cybermalveillancegouvfr-20252030"> read more </a> </article> <hr> <article> <h3> CVE-2025-27686 - Dell Unisphere for PowerMax LDAP Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-27686 <br> <strong>Published : </strong> April 7, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. <br> <strong>Severity:</strong> 2.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27686"> read more </a> </article> <hr> <article> <h3> CVE-2025-2251 - WildFly/JBoss EAP EJB Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2251 <br> <strong>Published : </strong> April 7, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2251"> read more </a> </article> <hr> <article> <h3> CVE-2025-30195 - PowerDNS Recursor DNS Cache Poisoning Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30195 <br> <strong>Published : </strong> April 7, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30195"> read more </a> </article> <hr> <article> <h3> CVE-2025-3369 - Novel-Plus SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3369 <br> <strong>Published : </strong> April 7, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3369"> read more </a> </article> <hr> <article> <h3> CVE-2025-3370 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3370 <br> <strong>Published : </strong> April 7, 2025, 2:15 p.m. | 2 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3370"> read more </a> </article> <hr> <article> <h3> CVE-2025-3352 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3352 <br> <strong>Published : </strong> April 7, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-scdetails.php. The manipulation of the argument contnum leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3352"> read more </a> </article> <hr> <article> <h3> CVE-2025-3353 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3353 <br> <strong>Published : </strong> April 7, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3353"> read more </a> </article> <hr> <article> <h3> CVE-2025-3359 - GNUPlot Segmentation Fault Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3359 <br> <strong>Published : </strong> April 7, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3359"> read more </a> </article> <hr> <article> <h3> CVE-2025-3360 - GLib ISO 8601 Timestamp Parsing Integer Overflow/Buffer Under-read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3360 <br> <strong>Published : </strong> April 7, 2025, 1:15 p.m. | 3 hours, 11 minutes ago <br> <strong>Description : </strong>A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function. <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3360"> read more </a> </article> <hr> <article> <h3> CVE-2025-0050 - Arm Ltd GPU Userspace Driver Buffer Boundary Violation </h3> <p> <strong>CVE ID : </strong>CVE-2025-0050 <br> <strong>Published : </strong> April 7, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0050"> read more </a> </article> <hr> <article> <h3> CVE-2025-3350 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3350 <br> <strong>Published : </strong> April 7, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3350"> read more </a> </article> <hr> <article> <h3> CVE-2025-3351 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3351 <br> <strong>Published : </strong> April 7, 2025, 12:15 p.m. | 4 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3351"> read more </a> </article> <hr> <article> <h3> CVE-2025-21443 - Cisco eAVB Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21443 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>Memory corruption while processing message content in eAVB. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21443"> read more </a> </article> <hr> <article> <h3> CVE-2025-21447 - Cisco Router Device IO Control Session Control Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-21447 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while processing device IO control call for session control. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21447"> read more </a> </article> <hr> <article> <h3> CVE-2025-21448 - Cisco Wireless Router Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21448 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>Transient DOS may occur while parsing SSID in action frames. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21448"> read more </a> </article> <hr> <article> <h3> CVE-2025-3348 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3348 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3348"> read more </a> </article> <hr> <article> <h3> CVE-2025-3349 - PCMan FTP Server Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3349 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 5 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SYST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3349"> read more </a> </article> <hr> <article> <h3> CVE-2025-21435 - Cisco ASA Internet Explorer Parsing Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21435 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Transient DOS may occur while parsing extended IE in beacon. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21435"> read more </a> </article> <hr> <article> <h3> CVE-2025-21436 - Adobe Flash Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21436 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21436"> read more </a> </article> <hr> <article> <h3> CVE-2025-21437 - Microsoft Windows Kernel Unmap IOCTL Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21437 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption while processing memory map or unmap IOCTL operations simultaneously. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21437"> read more </a> </article> <hr> <article> <h3> CVE-2025-21438 - Apache IoT Device Memory Corruption </h3> <p> <strong>CVE ID : </strong>CVE-2025-21438 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption while IOCTL call is invoked from user-space to read board data. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21438"> read more </a> </article> <hr> <article> <h3> CVE-2025-21439 - Cisco WLAN Driver Heap Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21439 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21439"> read more </a> </article> <hr> <article> <h3> CVE-2025-21440 - "TP-Link WLAN Driver Buffer Overflow" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21440 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21440"> read more </a> </article> <hr> <article> <h3> CVE-2025-21441 - "TP-Link WLAN Driver Out-of-Bounds Write Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21441 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21441"> read more </a> </article> <hr> <article> <h3> CVE-2025-21442 - Apache HTTP Server Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21442 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>Memory corruption while transmitting packet mapping information with invalid header payload size. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21442"> read more </a> </article> <hr> <article> <h3> CVE-2024-45552 - VivoLink Video Call RTCP Packet Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-45552 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45552"> read more </a> </article> <hr> <article> <h3> CVE-2024-45556 - Texas Instruments TCSR Linux Cryptographic Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45556 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45556"> read more </a> </article> <hr> <article> <h3> CVE-2024-45557 - Intel TME Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45557 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45557"> read more </a> </article> <hr> <article> <h3> CVE-2024-49848 - Qualcomm Snapdragon DSP IOCTL Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-49848 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption while processing multiple IOCTL calls from HLOS to DSP. <br> <strong>Severity:</strong> 6.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-49848"> read more </a> </article> <hr> <article> <h3> CVE-2025-21421 - Apache HTTP Server Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-21421 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption while processing escape code in API. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21421"> read more </a> </article> <hr> <article> <h3> CVE-2025-21423 - Citrix Receiver Use-After-Free </h3> <p> <strong>CVE ID : </strong>CVE-2025-21423 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21423"> read more </a> </article> <hr> <article> <h3> CVE-2025-21425 - Citrix Systems HAB Process Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21425 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption may occur due top improper access control in HAB process. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21425"> read more </a> </article> <hr> <article> <h3> CVE-2025-21428 - Aruba Wireless TSpec Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21428 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21428"> read more </a> </article> <hr> <article> <h3> CVE-2025-21429 - Cisco Wireless STA Memory Corruption Vulnerability (Buffer Overflow) </h3> <p> <strong>CVE ID : </strong>CVE-2025-21429 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21429"> read more </a> </article> <hr> <article> <h3> CVE-2025-21430 - Cisco Wireless Router Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21430 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21430"> read more </a> </article> <hr> <article> <h3> CVE-2025-21431 - VMware Guest VM Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-21431 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Information disclosure may be there when a guest VM is connected. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21431"> read more </a> </article> <hr> <article> <h3> CVE-2025-21434 - Cisco Wireless LAN Controller Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21434 <br> <strong>Published : </strong> April 7, 2025, 11:15 a.m. | 1 hour, 11 minutes ago <br> <strong>Description : </strong>Transient DOS may occur while parsing EHT operation IE or EHT capability IE. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21434"> read more </a> </article> <hr> <article> <h3> CVE-2025-3342 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3342 <br> <strong>Published : </strong> April 7, 2025, 8:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3342"> read more </a> </article> <hr> <article> <h3> CVE-2025-3343 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3343 <br> <strong>Published : </strong> April 7, 2025, 8:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3343"> read more </a> </article> <hr> <article> <h3> CVE-2025-3340 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3340 <br> <strong>Published : </strong> April 7, 2025, 7:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3340"> read more </a> </article> <hr> <article> <h3> CVE-2025-3341 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3341 <br> <strong>Published : </strong> April 7, 2025, 7:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3341"> read more </a> </article> <hr> <article> <h3> CVE-2024-11071 - Cyberdigm DestinyECM Cross-Site Request Forgery (CSRF) and JSON Hijacking </h3> <p> <strong>CVE ID : </strong>CVE-2024-11071 <br> <strong>Published : </strong> April 7, 2025, 6:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11071"> read more </a> </article> <hr> <article> <h3> CVE-2025-3338 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3338 <br> <strong>Published : </strong> April 7, 2025, 6:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3338"> read more </a> </article> <hr> <article> <h3> CVE-2025-3339 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3339 <br> <strong>Published : </strong> April 7, 2025, 6:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3339"> read more </a> </article> <hr> <article> <h3> CVE-2025-3336 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3336 <br> <strong>Published : </strong> April 7, 2025, 5:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3336"> read more </a> </article> <hr> <article> <h3> CVE-2025-3337 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3337 <br> <strong>Published : </strong> April 7, 2025, 5:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3337"> read more </a> </article> <hr> <article> <h3> CVE-2025-20663 - "Aruba WLAN AP Driver Information Disclosure Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20663 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-3031. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20663"> read more </a> </article> <hr> <article> <h3> CVE-2025-20664 - Aruba Wlan AP Driver Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-20664 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20664"> read more </a> </article> <hr> <article> <h3> CVE-2025-31170 - Apache Security Verification Module Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-31170 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31170"> read more </a> </article> <hr> <article> <h3> CVE-2025-31171 - "Apache Kernel File System Module Permission Bypass Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31171 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31171"> read more </a> </article> <hr> <article> <h3> CVE-2025-31172 - VMware Kernel Futex Module Memory Write Permission Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31172 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31172"> read more </a> </article> <hr> <article> <h3> CVE-2025-31173 - "Oracle Solaris Futex Kernel Memory Write Permission Bypass Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31173 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31173"> read more </a> </article> <hr> <article> <h3> CVE-2025-31174 - Cisco DFS Module Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31174 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31174"> read more </a> </article> <hr> <article> <h3> CVE-2025-31175 - DSoftBus Deserialization Mismatch Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31175 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31175"> read more </a> </article> <hr> <article> <h3> CVE-2025-3334 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3334 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3334"> read more </a> </article> <hr> <article> <h3> CVE-2025-3335 - Codeprojects Online Restaurant Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3335 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3335"> read more </a> </article> <hr> <article> <h3> CVE-2025-20657 - VDEC Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20657 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20657"> read more </a> </article> <hr> <article> <h3> CVE-2025-20658 - "Amazon Device Authentication Privilege Escalation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20658 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20658"> read more </a> </article> <hr> <article> <h3> CVE-2025-20659 - "Modem Denial of Service Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-20659 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20659"> read more </a> </article> <hr> <article> <h3> CVE-2025-20660 - Microsoft PlayReady TA Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20660 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20660"> read more </a> </article> <hr> <article> <h3> CVE-2025-20661 - Microsoft PlayReady TA Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20661 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20661"> read more </a> </article> <hr> <article> <h3> CVE-2025-20662 - Microsoft PlayReady TA Out-of-Bounds Read Local Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-20662 <br> <strong>Published : </strong> April 7, 2025, 4:15 a.m. | 4 hours, 59 minutes ago <br> <strong>Description : </strong>In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 07 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-20662"> read more </a> </article> <hr> <article> <h3> Fuite de données chez UTWIN </h3> <p>identité, adresse email, numéro de téléphone</p> <p class="feed-time"> Mon Apr 07 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#UTWIN-2025-04-07"> read more </a> </article> <hr> <article> <h3> CVE-2025-3318 - Kenj_Frog Company-Financial-Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3318 <br> <strong>Published : </strong> April 6, 2025, 2:15 p.m. | 14 hours, 11 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function page of the file src/main/java/com/controller/ShangpinleixingController.java. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3318"> read more </a> </article> <hr> <article> <h3> CVE-2025-3317 - Fumiao OpenCms Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3317 <br> <strong>Published : </strong> April 6, 2025, 12:15 p.m. | 13 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f. Affected is an unknown function of the file opencms-dev/src/main/webapp/view/admin/document/dataPage.jsp. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3317"> read more </a> </article> <hr> <article> <h3> CVE-2025-3316 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3316 <br> <strong>Published : </strong> April 6, 2025, 11:15 a.m. | 14 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3316"> read more </a> </article> <hr> <article> <h3> CVE-2025-3315 - SourceCodester Apartment Visitor Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3315 <br> <strong>Published : </strong> April 6, 2025, 10:15 a.m. | 15 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3315"> read more </a> </article> <hr> <article> <h3> CVE-2025-3314 - SourceCodester Apartment Visitor Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3314 <br> <strong>Published : </strong> April 6, 2025, 9:15 a.m. | 16 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3314"> read more </a> </article> <hr> <article> <h3> CVE-2025-3313 - PHPGurukul Men Salon Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3313 <br> <strong>Published : </strong> April 6, 2025, 8:15 a.m. | 17 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Men Salon Management System 1.0. Affected is an unknown function of the file /admin/add-customer.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3313"> read more </a> </article> <hr> <article> <h3> CVE-2025-32370 - Kentico Xperience Zip File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32370 <br> <strong>Published : </strong> April 6, 2025, 7:15 a.m. | 18 hours, 50 minutes ago <br> <strong>Description : </strong>Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not necessarily related to SVG or XSS. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32370"> read more </a> </article> <hr> <article> <h3> CVE-2025-3311 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3311 <br> <strong>Published : </strong> April 6, 2025, 7:15 a.m. | 18 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Men Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3311"> read more </a> </article> <hr> <article> <h3> CVE-2025-3312 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3312 <br> <strong>Published : </strong> April 6, 2025, 7:15 a.m. | 18 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Men Salon Management System 1.0. This issue affects some unknown processing of the file /admin/add-customer-services.php. The manipulation of the argument sids[] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3312"> read more </a> </article> <hr> <article> <h3> CVE-2025-32369 - Kentico Xperience Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32369 <br> <strong>Published : </strong> April 6, 2025, 6:15 a.m. | 19 hours, 51 minutes ago <br> <strong>Description : </strong>Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32369"> read more </a> </article> <hr> <article> <h3> CVE-2025-3309 - Blood Bank Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3309 <br> <strong>Published : </strong> April 6, 2025, 6:15 a.m. | 19 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3309"> read more </a> </article> <hr> <article> <h3> CVE-2025-3310 - Code-projects Blood Bank Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3310 <br> <strong>Published : </strong> April 6, 2025, 6:15 a.m. | 19 hours, 51 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3310"> read more </a> </article> <hr> <article> <h3> CVE-2025-1264 - "AIOSEO WordPress Broken Link Checker SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2025-1264 <br> <strong>Published : </strong> April 6, 2025, 5:15 a.m. | 17 hours, 48 minutes ago <br> <strong>Description : </strong>The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to SQL Injection via the 'orderBy' parameter in all versions up to, and including, 1.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1264"> read more </a> </article> <hr> <article> <h3> CVE-2025-3308 - Blood Bank Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3308 <br> <strong>Published : </strong> April 6, 2025, 4:15 a.m. | 18 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /viewrequest.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3308"> read more </a> </article> <hr> <article> <h3> CVE-2024-58131 - FISCO BCOS Denial of Service (DoS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-58131 <br> <strong>Published : </strong> April 6, 2025, 3:15 a.m. | 19 hours, 48 minutes ago <br> <strong>Description : </strong>FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time value) joins a blockchain network. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58131"> read more </a> </article> <hr> <article> <h3> CVE-2024-58132 - ChainMaker Concurrent Map Panic </h3> <p> <strong>CVE ID : </strong>CVE-2024-58132 <br> <strong>Published : </strong> April 6, 2025, 3:15 a.m. | 19 hours, 48 minutes ago <br> <strong>Description : </strong>In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58132"> read more </a> </article> <hr> <article> <h3> CVE-2024-58133 - ChainMaker Go Concurrency Panic </h3> <p> <strong>CVE ID : </strong>CVE-2024-58133 <br> <strong>Published : </strong> April 6, 2025, 3:15 a.m. | 19 hours, 48 minutes ago <br> <strong>Description : </strong>In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58133"> read more </a> </article> <hr> <article> <h3> CVE-2025-3307 - Blood Bank Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3307 <br> <strong>Published : </strong> April 6, 2025, 3:15 a.m. | 19 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3307"> read more </a> </article> <hr> <article> <h3> CVE-2025-3306 - Blood Bank Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3306 <br> <strong>Published : </strong> April 6, 2025, 1:15 a.m. | 20 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /don.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sun, 06 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3306"> read more </a> </article> <hr> <article> <h3> CVE-2025-32366 - ConnMan DNS Proxy Heap-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-32366 <br> <strong>Published : </strong> April 5, 2025, 11:15 p.m. | 19 hours, 47 minutes ago <br> <strong>Description : </strong>In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen) and memcpy(response+offset,*end,*rdlen). <br> <strong>Severity:</strong> 3.7 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32366"> read more </a> </article> <hr> <article> <h3> CVE-2025-3305 - "IKUN_Library Remote Improper Access Control Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3305 <br> <strong>Published : </strong> April 5, 2025, 11:15 p.m. | 19 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3305"> read more </a> </article> <hr> <article> <h3> CVE-2025-32364 - Poppler Floating-Point Exception </h3> <p> <strong>CVE ID : </strong>CVE-2025-32364 <br> <strong>Published : </strong> April 5, 2025, 10:15 p.m. | 20 hours, 48 minutes ago <br> <strong>Description : </strong>A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32364"> read more </a> </article> <hr> <article> <h3> CVE-2025-32365 - Poppler JBIG2Stream Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32365 <br> <strong>Published : </strong> April 5, 2025, 10:15 p.m. | 20 hours, 48 minutes ago <br> <strong>Description : </strong>Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check. <br> <strong>Severity:</strong> 4.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32365"> read more </a> </article> <hr> <article> <h3> CVE-2025-3304 - "Code-projects Patient Record Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3304 <br> <strong>Published : </strong> April 5, 2025, 10:15 p.m. | 20 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_not.php. The manipulation of the argument itr_no leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3304"> read more </a> </article> <hr> <article> <h3> CVE-2025-3303 - Apache Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3303 <br> <strong>Published : </strong> April 5, 2025, 9:15 p.m. | 21 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /birthing_record.php. The manipulation of the argument itr_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3303"> read more </a> </article> <hr> <article> <h3> CVE-2025-32357 - Zammad Privilege Escalation Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32359 <br> <strong>Published : </strong> April 5, 2025, 9:15 p.m. | 15 hours, 58 minutes ago <br> <strong>Description : </strong>In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor authentication configuration, users need to re-authenticate with their current password first. However, this change was enforced in Zammad only on the front end level, and not when using the API directly. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32359"> read more </a> </article> <hr> <article> <h3> CVE-2025-32360 - Zammad Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32360 <br> <strong>Published : </strong> April 5, 2025, 9:15 p.m. | 15 hours, 58 minutes ago <br> <strong>Description : </strong>In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared article drafts. However, a logged in customer was able to see details about shared drafts for their customer tickets in the browser console, which may contain confidential information, and also to manipulate them via API. <br> <strong>Severity:</strong> 4.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32360"> read more </a> </article> <hr> <article> <h3> CVE-2024-56370 - Xero Perl Cryptographic Entropy Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-56370 <br> <strong>Published : </strong> April 5, 2025, 7:15 p.m. | 14 hours, 50 minutes ago <br> <strong>Description : </strong>Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 19:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56370"> read more </a> </article> <hr> <article> <h3> CVE-2024-52322 - Xero WebService Perl Cryptographic Entropy Weakness </h3> <p> <strong>CVE ID : </strong>CVE-2024-52322 <br> <strong>Published : </strong> April 5, 2025, 5:15 p.m. | 13 hours, 58 minutes ago <br> <strong>Description : </strong>WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically WebService::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-52322"> read more </a> </article> <hr> <article> <h3> CVE-2024-57835 - Amon2::Auth::Site::LINE Cryptographically Insecure Random Number Generation </h3> <p> <strong>CVE ID : </strong>CVE-2024-57835 <br> <strong>Published : </strong> April 5, 2025, 4:15 p.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57835"> read more </a> </article> <hr> <article> <h3> CVE-2024-57868 - Web::API Cryptographically Insecure Randomness Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-57868 <br> <strong>Published : </strong> April 5, 2025, 4:15 p.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-57868"> read more </a> </article> <hr> <article> <h3> CVE-2024-58036 - Dropbox::API Cryptographically Insecure Random Number Generation </h3> <p> <strong>CVE ID : </strong>CVE-2024-58036 <br> <strong>Published : </strong> April 5, 2025, 4:15 p.m. | 14 hours, 58 minutes ago <br> <strong>Description : </strong>Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-58036"> read more </a> </article> <hr> <article> <h3> CVE-2025-30401 - WhatsApp for Windows MIME Type Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30401 <br> <strong>Published : </strong> April 5, 2025, 12:15 p.m. | 17 hours, 50 minutes ago <br> <strong>Description : </strong>A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30401"> read more </a> </article> <hr> <article> <h3> CVE-2025-3298 - SourceCodester Online Eyewear Shop Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3298 <br> <strong>Published : </strong> April 5, 2025, 11:15 a.m. | 18 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Registration Handler. The manipulation of the argument email leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3298"> read more </a> </article> <hr> <article> <h3> CVE-2025-3299 - PHPGurukul Men Salon Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3299 <br> <strong>Published : </strong> April 5, 2025, 11:15 a.m. | 18 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /appointment.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3299"> read more </a> </article> <hr> <article> <h3> CVE-2025-3297 - SourceCodester Online Eyewear Shop Cross Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3297 <br> <strong>Published : </strong> April 5, 2025, 9:15 a.m. | 20 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=save_product. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3297"> read more </a> </article> <hr> <article> <h3> CVE-2025-3296 - SourceCodester Online Eyewear Shop SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3296 <br> <strong>Published : </strong> April 5, 2025, 8:15 a.m. | 18 hours, 10 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=delete_customer. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3296"> read more </a> </article> <hr> <article> <h3> CVE-2025-2941 - WooCommerce Drag and Drop Multiple File Upload Remote File Moving Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2941 <br> <strong>Published : </strong> April 5, 2025, 7:15 a.m. | 19 hours, 10 minutes ago <br> <strong>Description : </strong>The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the wc-upload-file[] parameter in all versions up to, and including, 1.1.4. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file is moved (such as wp-config.php). <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2941"> read more </a> </article> <hr> <article> <h3> CVE-2025-0839 - ZoomSounds Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0839 <br> <strong>Published : </strong> April 5, 2025, 6:15 a.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>The ZoomSounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 6.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0839"> read more </a> </article> <hr> <article> <h3> CVE-2025-1233 - Lafka Plugin for WordPress Unauthorized Theme Option Update Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1233 <br> <strong>Published : </strong> April 5, 2025, 6:15 a.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_options_upload' AJAX function in all versions up to, and including, 7.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the theme option that overrides the site. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1233"> read more </a> </article> <hr> <article> <h3> CVE-2025-2789 - MultiVendorX Unauthenticated Table Rates Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2789 <br> <strong>Published : </strong> April 5, 2025, 6:15 a.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_table_rate_shipping_row function in all versions up to, and including, 4.2.19. This makes it possible for unauthenticated attackers to delete Table Rates that can impact the shipping cost calculations. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2789"> read more </a> </article> <hr> <article> <h3> CVE-2024-13776 - "ZoomSounds WordPress Wave Audio Player with Playlist Unauthorized Data Modification Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2024-13776 <br> <strong>Published : </strong> April 5, 2025, 6:15 a.m. | 1 hour, 49 minutes ago <br> <strong>Description : </strong>The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'dzsap_delete_notice' AJAX action in all versions up to, and including, 6.91. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 'seen' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. There are several other functions also vulnerable to missing authorization. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13776"> read more </a> </article> <hr> <article> <h3> CVE-2021-47667 - ZendTo OS Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2021-47667 <br> <strong>Published : </strong> April 5, 2025, 5:15 a.m. | 15 hours, 9 minutes ago <br> <strong>Description : </strong>An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request. <br> <strong>Severity:</strong> 10.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2021-47667"> read more </a> </article> <hr> <article> <h3> CVE-2025-32352 - ZendTo PHP Authentication Type Confusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32352 <br> <strong>Published : </strong> April 5, 2025, 5:15 a.m. | 15 hours, 9 minutes ago <br> <strong>Description : </strong>A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt. <br> <strong>Severity:</strong> 4.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32352"> read more </a> </article> <hr> <article> <h3> CVE-2024-13604 - KB Support WordPress Sensitive Information Exposure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13604 <br> <strong>Published : </strong> April 5, 2025, 2:15 a.m. | 18 hours, 10 minutes ago <br> <strong>Description : </strong>The KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.4 via the 'kbs' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/kbs directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 1.7.3.2. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13604"> read more </a> </article> <hr> <article> <h3> CVE-2025-0810 - WordPress Read More Accordion CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-0810 <br> <strong>Published : </strong> April 5, 2025, 2:15 a.m. | 18 hours, 10 minutes ago <br> <strong>Description : </strong>The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.5. This is due to missing or incorrect nonce validation on the addNewButtons() function. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0810"> read more </a> </article> <hr> <article> <h3> CVE-2025-2544 - WordPress AI Content Pipelines Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2544 <br> <strong>Published : </strong> April 5, 2025, 2:15 a.m. | 18 hours, 10 minutes ago <br> <strong>Description : </strong>The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2544"> read more </a> </article> <hr> <article> <h3> CVE-2025-2933 - "WordPress Email Notifications for Updates Unauthenticated Privilege Escalation" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2933 <br> <strong>Published : </strong> April 5, 2025, 2:15 a.m. | 18 hours, 10 minutes ago <br> <strong>Description : </strong>The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the awun_import_settings() function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2933"> read more </a> </article> <hr> <article> <h3> CVE-2025-1500 - IBM Maximo Application Suite File Upload Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1500 <br> <strong>Published : </strong> April 5, 2025, 1:15 a.m. | 19 hours, 9 minutes ago <br> <strong>Description : </strong>IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. <br> <strong>Severity:</strong> 5.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1500"> read more </a> </article> <hr> <article> <h3> CVE-2025-2889 - WordPress Link Library Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2889 <br> <strong>Published : </strong> April 5, 2025, 12:15 a.m. | 20 hours, 10 minutes ago <br> <strong>Description : </strong>The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Additional Parameters in all versions up to, and including, 7.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Sat, 05 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2889"> read more </a> </article> <hr> <article> <h3> CVE-2025-3268 - TinyWebServer qinguoyi Remote Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-3268 <br> <strong>Published : </strong> April 4, 2025, 9:15 p.m. | 23 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/http_conn.cpp. The manipulation of the argument m_url_real leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3268"> read more </a> </article> <hr> <article> <h3> CVE-2025-3267 - TinyWebServer SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3267 <br> <strong>Published : </strong> April 4, 2025, 8:15 p.m. | 1 day ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/http_conn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3267"> read more </a> </article> <hr> <article> <h3> CVE-2025-3265 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3265 <br> <strong>Published : </strong> April 4, 2025, 8:15 p.m. | 11 hours, 50 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3265"> read more </a> </article> <hr> <article> <h3> CVE-2025-3266 - Qinguoyi TinyWebServer Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3266 <br> <strong>Published : </strong> April 4, 2025, 8:15 p.m. | 22 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/http_conn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 20:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3266"> read more </a> </article> <hr> <article> <h3> CVE-2024-11235 - Apache PHP Use-After-Free Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-11235 <br> <strong>Published : </strong> April 4, 2025, 6:15 p.m. | 13 hours, 49 minutes ago <br> <strong>Description : </strong>In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-11235"> read more </a> </article> <hr> <article> <h3> CVE-2025-29476 - OSS-Fuzz c-blosc2 Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-29476 <br> <strong>Published : </strong> April 4, 2025, 6:15 p.m. | 22 hours, 9 minutes ago <br> <strong>Description : </strong>Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29476"> read more </a> </article> <hr> <article> <h3> CVE-2025-29477 - Fluent-Bit Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29477 <br> <strong>Published : </strong> April 4, 2025, 6:15 p.m. | 22 hours, 9 minutes ago <br> <strong>Description : </strong>An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29477"> read more </a> </article> <hr> <article> <h3> CVE-2025-3259 - Tenda RX3 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3259 <br> <strong>Published : </strong> April 4, 2025, 6:15 p.m. | 22 hours, 9 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 18:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3259"> read more </a> </article> <hr> <article> <h3> CVE-2025-3256 - Xujiangfei Admintwo Remote File Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3256 <br> <strong>Published : </strong> April 4, 2025, 5:15 p.m. | 15 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability was found in xujiangfei admintwo 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/updateSet. The manipulation of the argument email leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3256"> read more </a> </article> <hr> <article> <h3> CVE-2025-3257 - Xujiangfei Admintwo Cross-Site Request Forgery Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3257 <br> <strong>Published : </strong> April 4, 2025, 5:15 p.m. | 15 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3257"> read more </a> </article> <hr> <article> <h3> CVE-2025-3258 - PHPGurukul Old Age Home Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3258 <br> <strong>Published : </strong> April 4, 2025, 5:15 p.m. | 15 hours, 58 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Old Age Home Management System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3258"> read more </a> </article> <hr> <article> <h3> CVE-2025-3255 - Xujiangfei Admintwo Remote File Access Control Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3255 <br> <strong>Published : </strong> April 4, 2025, 4:15 p.m. | 15 hours, 49 minutes ago <br> <strong>Description : </strong>A vulnerability was found in xujiangfei admintwo 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/home. The manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3255"> read more </a> </article> <hr> <article> <h3> CVE-2025-31420 - Tomdever wpForo Forum Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-31420 <br> <strong>Published : </strong> April 4, 2025, 1:15 p.m. | 48 minutes ago <br> <strong>Description : </strong>Incorrect Privilege Assignment vulnerability in Tomdever wpForo Forum allows Privilege Escalation.This issue affects wpForo Forum: from n/a through 2.4.2. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31420"> read more </a> </article> <hr> <article> <h3> CVE-2025-31421 - Oblak Studio Srbtranslatin Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31421 <br> <strong>Published : </strong> April 4, 2025, 1:15 p.m. | 48 minutes ago <br> <strong>Description : </strong>Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak Studio Srbtranslatin allows Retrieve Embedded Sensitive Data.This issue affects Srbtranslatin: from n/a through 3.2.0. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31421"> read more </a> </article> <hr> <article> <h3> CVE-2025-3189 - DoWISP Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3189 <br> <strong>Published : </strong> April 4, 2025, 1:15 p.m. | 48 minutes ago <br> <strong>Description : </strong>Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3189"> read more </a> </article> <hr> <article> <h3> CVE-2025-3243 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3243 <br> <strong>Published : </strong> April 4, 2025, 12:15 p.m. | 1 hour, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3243"> read more </a> </article> <hr> <article> <h3> CVE-2025-3244 - SourceCodester Web-based Pharmacy Product Management System File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3244 <br> <strong>Published : </strong> April 4, 2025, 12:15 p.m. | 1 hour, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add-admin.php of the component Create User Page. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3244"> read more </a> </article> <hr> <article> <h3> CVE-2025-3245 - iSourcecode Library Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3245 <br> <strong>Published : </strong> April 4, 2025, 12:15 p.m. | 1 hour, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3245"> read more </a> </article> <hr> <article> <h3> CVE-2025-22282 - EPC ez Form Calculator WordPress Plugin Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22282 <br> <strong>Published : </strong> April 4, 2025, 11:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EPC ez Form Calculator - WordPress plugin allows Reflected XSS.This issue affects ez Form Calculator - WordPress plugin: from n/a through 2.14.1.2. <br> <strong>Severity:</strong> 7.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22282"> read more </a> </article> <hr> <article> <h3> CVE-2025-3239 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3239 <br> <strong>Published : </strong> April 4, 2025, 11:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3239"> read more </a> </article> <hr> <article> <h3> CVE-2025-3240 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3240 <br> <strong>Published : </strong> April 4, 2025, 11:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3240"> read more </a> </article> <hr> <article> <h3> CVE-2025-3241 - Zhangyanbo2007 Youkefu XML External Entity Reference (XXE) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3241 <br> <strong>Published : </strong> April 4, 2025, 11:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an unknown part of the file src/main/java/com/ukefu/webim/web/handler/admin/callcenter/CallCenterRouterController.java of the component XML Document Handler. The manipulation of the argument routercontent leads to xml external entity reference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3241"> read more </a> </article> <hr> <article> <h3> CVE-2025-3242 - PHPGurukul e-Diary Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3242 <br> <strong>Published : </strong> April 4, 2025, 11:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3242"> read more </a> </article> <hr> <article> <h3> CVE-2025-1865 - Adobe Kernel Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1865 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM. <br> <strong>Severity:</strong> 7.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1865"> read more </a> </article> <hr> <article> <h3> CVE-2025-2243 - Bitdefender GravityZone Console SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2243 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2243"> read more </a> </article> <hr> <article> <h3> CVE-2025-2244 - Bitdefender GravityZone Console PHP Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2244 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write, and gain arbitrary command execution on the host system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2244"> read more </a> </article> <hr> <article> <h3> CVE-2025-2245 - Bitdefender GravityZone Update Server SSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2245 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2245"> read more </a> </article> <hr> <article> <h3> CVE-2025-3235 - PHPGurukul Old Age Home Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3235 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3235"> read more </a> </article> <hr> <article> <h3> CVE-2025-3236 - Tenda Web Management Interface Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3236 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file /goform/VirSerDMZ of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3236"> read more </a> </article> <hr> <article> <h3> CVE-2025-3237 - Tenda FH1202 File Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3237 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown processing of the file /goform/wrlwpsset. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3237"> read more </a> </article> <hr> <article> <h3> CVE-2025-3238 - PHPGurukul Online Fire Reporting System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3238 <br> <strong>Published : </strong> April 4, 2025, 10:15 a.m. | 3 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3238"> read more </a> </article> <hr> <article> <h3> CVE-2025-3229 - PHPGurukul Restaurant Table Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3229 <br> <strong>Published : </strong> April 4, 2025, 9:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /edit-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3229"> read more </a> </article> <hr> <article> <h3> CVE-2025-3231 - PHPGurukul Zoo Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3231 <br> <strong>Published : </strong> April 4, 2025, 9:15 a.m. | 4 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3231"> read more </a> </article> <hr> <article> <h3> CVE-2025-3105 - Vehica Core WordPress Plugin Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3105 <br> <strong>Published : </strong> April 4, 2025, 8:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 1.0.97. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3105"> read more </a> </article> <hr> <article> <h3> CVE-2025-3219 - Perfex CRM Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3219 <br> <strong>Published : </strong> April 4, 2025, 8:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3219"> read more </a> </article> <hr> <article> <h3> CVE-2025-3220 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3220 <br> <strong>Published : </strong> April 4, 2025, 8:15 a.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3220"> read more </a> </article> <hr> <article> <h3> CVE-2025-3217 - PHPGurukul e-Diary Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3217 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3217"> read more </a> </article> <hr> <article> <h3> CVE-2025-2797 - WordPress Woffice Core CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-2797 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'woffice_handle_user_approval_actions' function. This makes it possible for unauthenticated attackers to approve registration for any user via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2797"> read more </a> </article> <hr> <article> <h3> CVE-2025-32111 - Docker/Acme.sh Insecure GitHub Workflow Credentials Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32111 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout. <br> <strong>Severity:</strong> 8.7 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32111"> read more </a> </article> <hr> <article> <h3> CVE-2025-3086 - M-Files Server Anonymous User Isolation Bypass Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-3086 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>Improper isolation of users in M-Files Server version before 25.3.14549 allows anonymous user to affect other anonymous users views and possibly cause a denial of service <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3086"> read more </a> </article> <hr> <article> <h3> CVE-2025-3087 - M-Files Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-3087 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3087"> read more </a> </article> <hr> <article> <h3> CVE-2025-3215 - PHPGurukul Restaurant Table Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3215 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3215"> read more </a> </article> <hr> <article> <h3> CVE-2025-3216 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3216 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 4 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects an unknown part of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3216"> read more </a> </article> <hr> <article> <h3> CVE-2025-2780 - Woffice Core WordPress Remote File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2780 <br> <strong>Published : </strong> April 4, 2025, 7:15 a.m. | 2 hours, 47 minutes ago <br> <strong>Description : </strong>The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeaturedImage' function in all versions up to, and including, 5.4.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2780"> read more </a> </article> <hr> <article> <h3> CVE-2024-13645 - TagDiv Composer PHP Object Instantiation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13645 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The tagDiv Composer plugin for WordPress is vulnerable to PHP Object Instantiation in all versions up to, and including, 5.3 via module parameter. This makes it possible for unauthenticated attackers to Instantiate a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13645"> read more </a> </article> <hr> <article> <h3> CVE-2024-13708 - WooCommerce Booster for WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13708 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in versions 4.0.1 to 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13708"> read more </a> </article> <hr> <article> <h3> CVE-2024-13898 - WordPress Simple Banner Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13898 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13898"> read more </a> </article> <hr> <article> <h3> CVE-2024-42208 - HCL Connections Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-42208 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42208"> read more </a> </article> <hr> <article> <h3> CVE-2025-2159 - M-Files Server Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2159 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local user to run scripts via UI <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2159"> read more </a> </article> <hr> <article> <h3> CVE-2025-2270 - WordPress Countdown Clock Plugin Local File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2270 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.9.1 via the createCdObj function. This makes it possible for unauthenticated attackers to include and execute files with the specific filenames on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in some cases. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2270"> read more </a> </article> <hr> <article> <h3> CVE-2025-2279 - Maps WordPress Plugin Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2279 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2279"> read more </a> </article> <hr> <article> <h3> CVE-2025-2317 - WordPress Product Filter by WBW SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-2317 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The Product Filter by WBW plugin for WordPress is vulnerable to time-based SQL Injection via the filtersDataBackend parameter in all versions up to, and including, 2.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2317"> read more </a> </article> <hr> <article> <h3> CVE-2025-2836 - RegistrationMagic WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2836 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘payment_method’ parameter in all versions up to, and including, 6.0.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2836"> read more </a> </article> <hr> <article> <h3> CVE-2025-3211 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3211 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /birthing_print.php. The manipulation of the argument itr_no leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3211"> read more </a> </article> <hr> <article> <h3> CVE-2025-3213 - PHPGurukul e-Diary Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3213 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /view-note.php?noteid=11. The manipulation of the argument remark leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3213"> read more </a> </article> <hr> <article> <h3> CVE-2025-3214 - JFinal CMS Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3214 <br> <strong>Published : </strong> April 4, 2025, 6:15 a.m. | 3 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that this is not a bug but a feature. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3214"> read more </a> </article> <hr> <article> <h3> CVE-2025-3194 - Bigint-Buffer Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3194 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3194"> read more </a> </article> <hr> <article> <h3> CVE-2025-3197 - Apache expand-object Prototype Pollution </h3> <p> <strong>CVE ID : </strong>CVE-2025-3197 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like __proto__. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3197"> read more </a> </article> <hr> <article> <h3> CVE-2025-3208 - Apache Code-projects Patient Record Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3208 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xray_print.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3208"> read more </a> </article> <hr> <article> <h3> CVE-2025-3209 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3209 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_patient.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3209"> read more </a> </article> <hr> <article> <h3> CVE-2025-3210 - "Code-Projects Patient Record Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3210 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthing_pending.php. The manipulation of the argument birth_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3210"> read more </a> </article> <hr> <article> <h3> CVE-2024-13744 - WooCommerce Booster Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13744 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 42 minutes ago <br> <strong>Description : </strong>The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the validate_product_input_fields_on_add_to_cart function in versions 4.0.1 to 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 8.1 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13744"> read more </a> </article> <hr> <article> <h3> CVE-2025-2075 - WordPress Uncanny Automator Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-2075 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 42 minutes ago <br> <strong>Description : </strong>The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to add_role() and user_role() functions missing proper capability checks performed through the validate_rest_call() function. This makes it possible for unauthenticated attackers to set the role of arbitrary users to administrator granting full access to the site, though privilege escalation requires an active account on the site so this is considered an authenticated privilege escalation. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2075"> read more </a> </article> <hr> <article> <h3> CVE-2025-3191 - "React-Draft-Wysiwyg XSS Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3191 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 42 minutes ago <br> <strong>Description : </strong>All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button which will then result in saving the payload in the <iframe> tag. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3191"> read more </a> </article> <hr> <article> <h3> CVE-2025-3192 - Browsershot SSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3192 <br> <strong>Published : </strong> April 4, 2025, 5:15 a.m. | 42 minutes ago <br> <strong>Description : </strong>Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl() function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 05:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3192"> read more </a> </article> <hr> <article> <h3> CVE-2025-3206 - "Code-projects Hospital Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3206 <br> <strong>Published : </strong> April 4, 2025, 4:15 a.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3206"> read more </a> </article> <hr> <article> <h3> CVE-2025-3207 - Code-projects Patient Record Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3207 <br> <strong>Published : </strong> April 4, 2025, 4:15 a.m. | 1 hour, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /birthing_form.php. The manipulation of the argument birth_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3207"> read more </a> </article> <hr> <article> <h3> CVE-2025-3202 - Ageerle Ruoyi-ai Remote Improper Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3202 <br> <strong>Published : </strong> April 4, 2025, 3:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Affected is an unknown function of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysNoticeController.java. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The name of the patch is 6382e177bf90cc56ff70521842409e35c50df32d. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3202"> read more </a> </article> <hr> <article> <h3> CVE-2025-3203 - Tenda W18E Stack-Based Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-3203 <br> <strong>Published : </strong> April 4, 2025, 3:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3203"> read more </a> </article> <hr> <article> <h3> CVE-2025-3204 - CodeAstro Car Rental System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3204 <br> <strong>Published : </strong> April 4, 2025, 3:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3204"> read more </a> </article> <hr> <article> <h3> CVE-2025-3205 - CodeAstro Student Grading System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3205 <br> <strong>Published : </strong> April 4, 2025, 3:15 a.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the file studentsubject.php. The manipulation of the argument studentId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3205"> read more </a> </article> <hr> <article> <h3> CVE-2025-24310 - C-More Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24310 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24310"> read more </a> </article> <hr> <article> <h3> CVE-2025-24317 - ViewJet C-more series and GC-A2 series HMI Unauthenticated Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-24317 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service (DoS) condition. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-24317"> read more </a> </article> <hr> <article> <h3> CVE-2025-25061 - ViewJet C-more/HMI GC-A2 Unauthenticated Proxy Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25061 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25061"> read more </a> </article> <hr> <article> <h3> CVE-2025-26401 - C-more HMI ViewJet Password Weak Encoding Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-26401 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-26401"> read more </a> </article> <hr> <article> <h3> CVE-2025-3195 - iSourcecode Online Blood Bank Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3195 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0. This issue affects some unknown processing of the file /bbms.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3195"> read more </a> </article> <hr> <article> <h3> CVE-2025-3196 - Open Asset Import Library Assimp Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3196 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3196"> read more </a> </article> <hr> <article> <h3> CVE-2025-3198 - GNU Binutils objdump Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3198 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3198"> read more </a> </article> <hr> <article> <h3> CVE-2025-3199 - Ageerle Ruoyi-ai Remote Improper Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3199 <br> <strong>Published : </strong> April 4, 2025, 2:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysModelController.java of the component API Interface. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.2 is able to address this issue. The name of the patch is c0daf641fb25b244591b7a6c3affa35c69d321fe. It is recommended to upgrade the affected component. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3199"> read more </a> </article> <hr> <article> <h3> CVE-2025-3187 - "PHPGurukul e-Diary Management System SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3187 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3187"> read more </a> </article> <hr> <article> <h3> CVE-2025-3188 - PHPGurukul e-Diary Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3188 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3188"> read more </a> </article> <hr> <article> <h3> CVE-2025-25000 - Microsoft Edge (Chromium-based) Type Confusion Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25000 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25000"> read more </a> </article> <hr> <article> <h3> CVE-2025-25001 - Microsoft Edge Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25001 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25001"> read more </a> </article> <hr> <article> <h3> CVE-2025-29796 - Microsoft Edge for iOS UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29796 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29796"> read more </a> </article> <hr> <article> <h3> CVE-2025-29815 - Microsoft Edge Use After Free Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29815 <br> <strong>Published : </strong> April 4, 2025, 1:15 a.m. | 2 hours, 45 minutes ago <br> <strong>Description : </strong>Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. <br> <strong>Severity:</strong> 7.6 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29815"> read more </a> </article> <hr> <article> <h3> CVE-2025-3186 - Projectworlds Online Doctor Appointment Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3186 <br> <strong>Published : </strong> April 4, 2025, 12:15 a.m. | 3 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient/invoice.php. The manipulation of the argument appid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Fri, 04 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3186"> read more </a> </article> <hr> <article> <h3> CVE-2025-3184 - Projectworlds Online Doctor Appointment Booking System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3184 <br> <strong>Published : </strong> April 3, 2025, 11:15 p.m. | 4 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /patient/profile.php?patientId=1. The manipulation of the argument patientFirstName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3184"> read more </a> </article> <hr> <article> <h3> CVE-2025-3185 - Projectworlds Online Doctor Appointment Booking System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3185 <br> <strong>Published : </strong> April 3, 2025, 11:15 p.m. | 4 hours, 45 minutes ago <br> <strong>Description : </strong>A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3185"> read more </a> </article> <hr> <article> <h3> CVE-2025-30370 - Jupyterlab-Git Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30370 <br> <strong>Published : </strong> April 3, 2025, 10:15 p.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(<command>). These directory names are allowed in macOS and a majority of Linux distributions. If a user starts jupyter-lab in a parent directory of this inappropriately-named Git repository, opens it, and clicks "Git > Open Git Repository in Terminal" from the menu bar, then the injected command <command> is run in the user's shell without the user's permission. This issue is occurring because when that menu entry is clicked, jupyterlab-git opens the terminal and runs cd <git-repo-path> through the shell to set the current directory. Doing so runs any command substitution strings present in the directory name, which leads to the command injection issue described here. A previous patch provided an incomplete fix. This vulnerability is fixed in 0.51.1. <br> <strong>Severity:</strong> 7.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30370"> read more </a> </article> <hr> <article> <h3> CVE-2025-3181 - Projectworlds Online Doctor Appointment Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3181 <br> <strong>Published : </strong> April 3, 2025, 10:15 p.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected by this issue is some unknown functionality of the file /patient/appointment.php?scheduleDate=1&appid=1. The manipulation of the argument scheduleDate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3181"> read more </a> </article> <hr> <article> <h3> CVE-2025-3182 - Projectworlds Online Doctor Appointment Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3182 <br> <strong>Published : </strong> April 3, 2025, 10:15 p.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in projectworlds Online Doctor Appointment Booking System 1.0. This affects an unknown part of the file /patient/getschedule.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3182"> read more </a> </article> <hr> <article> <h3> CVE-2025-3183 - Projectworlds Online Doctor Appointment Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3183 <br> <strong>Published : </strong> April 3, 2025, 10:15 p.m. | 5 hours, 46 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /patient/patientupdateprofile.php. The manipulation of the argument patientFirstName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3183"> read more </a> </article> <hr> <article> <h3> CVE-2023-47639 - API Platform Core Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2023-47639 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-47639"> read more </a> </article> <hr> <article> <h3> CVE-2025-31115 - "XZ Utils liblzma Multithreaded .xz Decoder Heap Use After Free and Null Pointer Dereference" </h3> <p> <strong>CVE ID : </strong>CVE-2025-31115 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and writing to an address based on the null pointer plus an offset. Applications and libraries that use the lzma_stream_decoder_mt function are affected. The bug has been fixed in XZ Utils 5.8.1, and the fix has been committed to the v5.4, v5.6, v5.8, and master branches in the xz Git repository. No new release packages will be made from the old stable branches, but a standalone patch is available that applies to all affected releases. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31115"> read more </a> </article> <hr> <article> <h3> CVE-2025-32054 - JetBrains IntelliJ IDEA Source Code Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-32054 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32054"> read more </a> </article> <hr> <article> <h3> CVE-2025-3166 - Code-projects Product Management System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3166 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function search_item of the component Search Product Menu. The manipulation of the argument target leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3166"> read more </a> </article> <hr> <article> <h3> CVE-2025-3167 - Tenda API Interface Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3167 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3167"> read more </a> </article> <hr> <article> <h3> CVE-2025-3168 - PHPGurukul Time Table Generator System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3168 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3168"> read more </a> </article> <hr> <article> <h3> CVE-2025-3169 - Projeqtor Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3169 <br> <strong>Published : </strong> April 3, 2025, 5:15 p.m. | 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tool/saveAttachment.php. The manipulation of the argument attachmentFiles leads to unrestricted upload. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 12.0.3 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains, that "this vulnerability can be exploited only on not securely installed instances, as it is adviced during product install: attachment directory should be out of web reach, so that even if executable file can be uploaded, it cannot be executed through the web." <br> <strong>Severity:</strong> 5.0 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3169"> read more </a> </article> <hr> <article> <h3> CVE-2024-4877 - OpenVPN Windows Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-4877 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-4877"> read more </a> </article> <hr> <article> <h3> CVE-2025-22457 - Ivanti Connect Secure Remote Code Execution Buffer Overflow </h3> <p> <strong>CVE ID : </strong>CVE-2025-22457 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution. <br> <strong>Severity:</strong> 9.0 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22457"> read more </a> </article> <hr> <article> <h3> CVE-2025-29987 - Dell PowerProtect Data Domain DD OS Insufficient Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29987 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29987"> read more </a> </article> <hr> <article> <h3> CVE-2025-3163 - InternLM LMDeploy Code Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3163 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3163"> read more </a> </article> <hr> <article> <h3> CVE-2025-3164 - Tencent Music Entertainment SuperSonic H2 Database Connection Handler Code Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3164 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/semantic/database/testConnect of the component H2 Database Connection Handler. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3164"> read more </a> </article> <hr> <article> <h3> CVE-2025-3165 - Thu-Pacman Chitu Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3165 <br> <strong>Published : </strong> April 3, 2025, 4:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckpt_path/quant_ckpt_dir leads to deserialization. An attack has to be approached locally. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3165"> read more </a> </article> <hr> <article> <h3> CVE-2025-0272 - HCL DevOps Deploy / HCL Launch HTML Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0272 <br> <strong>Published : </strong> April 3, 2025, 3:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0272"> read more </a> </article> <hr> <article> <h3> CVE-2025-3160 - Open Asset Import Library Assimp Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3160 <br> <strong>Published : </strong> April 3, 2025, 3:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as a0993658f40d8e13ff5823990c30b43c82a5daf0. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3160"> read more </a> </article> <hr> <article> <h3> CVE-2025-3161 - Tenda AC10 Stack-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3161 <br> <strong>Published : </strong> April 3, 2025, 3:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3161"> read more </a> </article> <hr> <article> <h3> CVE-2025-3162 - InternLM LMDeploy Deserialization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3162 <br> <strong>Published : </strong> April 3, 2025, 3:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function load_weight_ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3162"> read more </a> </article> <hr> <article> <h3> CVE-2025-3190 - Apache HTTP Server Uncontrolled Memory Allocation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3190 <br> <strong>Published : </strong> April 3, 2025, 3:15 p.m. | 2 hours, 43 minutes ago <br> <strong>Description : </strong>Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3190"> read more </a> </article> <hr> <article> <h3> CVE-2025-32051 - Libsoup Data URI Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-32051 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32051"> read more </a> </article> <hr> <article> <h3> CVE-2025-32052 - Libsoup Heap Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32052 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32052"> read more </a> </article> <hr> <article> <h3> CVE-2025-32053 - Libsoup Heap Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-32053 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-32053"> read more </a> </article> <hr> <article> <h3> CVE-2025-3155 - Yelp Gnome User Help Arbitrary Script Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3155 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3155"> read more </a> </article> <hr> <article> <h3> CVE-2025-3157 - Intelbras WRN 150 Wireless Menu Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3157 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01. It has been rated as problematic. This issue affects some unknown processing of the component Wireless Menu. The manipulation of the argument SSID leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The vendor was contacted early about this issue and explains that the latest version is not affected. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3157"> read more </a> </article> <hr> <article> <h3> CVE-2025-3158 - Open Asset Import Library Assimp Heap-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3158 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3158"> read more </a> </article> <hr> <article> <h3> CVE-2025-3159 - Open Asset Import Library Assimp Heap-Based Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3159 <br> <strong>Published : </strong> April 3, 2025, 2:15 p.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is e8a6286542924e628e02749c4f5ac4f91fdae71b. It is recommended to apply a patch to fix this issue. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3159"> read more </a> </article> <hr> <article> <h3> CVE-2024-9416 - WordPress Modula Image Gallery Stored Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-9416 <br> <strong>Published : </strong> April 3, 2025, 1:15 p.m. | 42 minutes ago <br> <strong>Description : </strong>The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions <= 5.0.36) due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-9416"> read more </a> </article> <hr> <article> <h3> CVE-2025-22927 - OS4ED openSIS Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22927 <br> <strong>Published : </strong> April 3, 2025, 1:15 p.m. | 42 minutes ago <br> <strong>Description : </strong>An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.php?modname=messaging/Inbox.php&modfunc=save&filename. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22927"> read more </a> </article> <hr> <article> <h3> CVE-2025-22928 - OS4ED openSIS SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22928 <br> <strong>Published : </strong> April 3, 2025, 1:15 p.m. | 42 minutes ago <br> <strong>Description : </strong>OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22928"> read more </a> </article> <hr> <article> <h3> CVE-2025-2945 - pgAdmin 4 Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2945 <br> <strong>Published : </strong> April 3, 2025, 1:15 p.m. | 42 minutes ago <br> <strong>Description : </strong>Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules). The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution. This issue affects pgAdmin 4: before 9.2. <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2945"> read more </a> </article> <hr> <article> <h3> CVE-2025-2946 - pgAdmin Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2946 <br> <strong>Published : </strong> April 3, 2025, 1:15 p.m. | 42 minutes ago <br> <strong>Description : </strong>pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser. <br> <strong>Severity:</strong> 9.1 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2946"> read more </a> </article> <hr> <article> <h3> CVE-2025-2299 - LuckyWP Table of Contents CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2299 <br> <strong>Published : </strong> April 3, 2025, 12:15 p.m. | 1 hour, 43 minutes ago <br> <strong>Description : </strong>The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.10. This is due to missing or incorrect nonce validation on the 'ajaxEdit' function. This makes it possible for unauthenticated attackers to inject arbitrary web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2299"> read more </a> </article> <hr> <article> <h3> CVE-2024-53868 - Apache Traffic Server Chunked Request Smuggling Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-53868 <br> <strong>Published : </strong> April 3, 2025, 9:15 a.m. | 4 hours, 43 minutes ago <br> <strong>Description : </strong>Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4. Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-53868"> read more </a> </article> <hr> <article> <h3> CVE-2025-21995 - Linux Kernel DRM Fence Reference Count Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-21995 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails. Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance. [phasta: add git tag info for stable kernel] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21995"> read more </a> </article> <hr> <article> <h3> CVE-2025-21996 - Radeon Linux Kernel Uninitialized Variable Use </h3> <p> <strong>CVE ID : </strong>CVE-2025-21996 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() On the off chance that command stream passed from userspace via ioctl() call to radeon_vce_cs_parse() is weirdly crafted and first command to execute is to encode (case 0x03000001), the function in question will attempt to call radeon_vce_cs_reloc() with size argument that has not been properly initialized. Specifically, 'size' will point to 'tmp' variable before the latter had a chance to be assigned any value. Play it safe and init 'tmp' with 0, thus ensuring that radeon_vce_cs_reloc() will catch an early error in cases like these. Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE. (cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21996"> read more </a> </article> <hr> <article> <h3> CVE-2025-21997 - Linux Kernel xsk Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21997 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21997"> read more </a> </article> <hr> <article> <h3> CVE-2025-21998 - Apache Firmware Null Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-21998 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: fix efivars registration race Since the conversion to using the TZ allocator, the efivars service is registered before the memory pool has been allocated, something which can lead to a NULL-pointer dereference in case of a racing EFI variable access. Make sure that all resources have been set up before registering the efivars. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21998"> read more </a> </article> <hr> <article> <h3> CVE-2025-21999 - Apache Linux proc UAF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21999 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation. The bug is that pde->proc_ops don't belong to /proc, it belongs to a module, therefore dereferencing it after /proc entry has been registered is a bug unless use_pde/unuse_pde() pair has been used. use_pde/unuse_pde can be avoided (2 atomic ops!) because pde->proc_ops never changes so information necessary for inode instantiation can be saved _before_ proc_register() in PDE itself and used later, avoiding pde->proc_ops->... dereference. rmmod lookup sys_delete_module proc_lookup_de pde_get(de); proc_get_inode(dir->i_sb, de); mod->exit() proc_remove remove_proc_subtree proc_entry_rundown(de); free_module(mod); if (S_ISREG(inode->i_mode)) if (de->proc_ops->proc_read_iter) --> As module is already freed, will trigger UAF BUG: unable to handle page fault for address: fffffbfff80a702b PGD 817fc4067 P4D 817fc4067 PUD 817fc0067 PMD 102ef4067 PTE 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 26 UID: 0 PID: 2667 Comm: ls Tainted: G Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:proc_get_inode+0x302/0x6e0 RSP: 0018:ffff88811c837998 EFLAGS: 00010a06 RAX: dffffc0000000000 RBX: ffffffffc0538140 RCX: 0000000000000007 RDX: 1ffffffff80a702b RSI: 0000000000000001 RDI: ffffffffc0538158 RBP: ffff8881299a6000 R08: 0000000067bbe1e5 R09: 1ffff11023906f20 R10: ffffffffb560ca07 R11: ffffffffb2b43a58 R12: ffff888105bb78f0 R13: ffff888100518048 R14: ffff8881299a6004 R15: 0000000000000001 FS: 00007f95b9686840(0000) GS:ffff8883af100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffbfff80a702b CR3: 0000000117dd2000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> proc_lookup_de+0x11f/0x2e0 __lookup_slow+0x188/0x350 walk_component+0x2ab/0x4f0 path_lookupat+0x120/0x660 filename_lookup+0x1ce/0x560 vfs_statx+0xac/0x150 __do_sys_newstat+0x96/0x110 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e [adobriyan@gmail.com: don't do 2 atomic ops on the common path] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21999"> read more </a> </article> <hr> <article> <h3> CVE-2025-22000 - Linux Kernel Memory Leak in Huge Memory Folios </h3> <p> <strong>CVE ID : </strong>CVE-2025-22000 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folio_put_refs(folio, folio_nr_pages(folio)) should be used to drop all page cache refs. Otherwise, the folio will not be freed, causing memory leak. This leak would happen on a filesystem with blocksize > page_size and a truncate is performed, where the blocksize makes folios split to >0 order ones, causing truncated folios not being freed. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22000"> read more </a> </article> <hr> <article> <h3> CVE-2025-22001 - "Qualcomm Accelerator Integer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-22001 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaic_validate_req() These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22001"> read more </a> </article> <hr> <article> <h3> CVE-2025-22002 - HP Linux Kernel Netfs NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22002 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: netfs: Call `invalidate_cache` only if implemented Many filesystems such as NFS and Ceph do not implement the `invalidate_cache` method. On those filesystems, if writing to the cache (`NETFS_WRITE_TO_CACHE`) fails for some reason, the kernel crashes like this: BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page PGD 0 P4D 0 Oops: Oops: 0010 [#1] SMP PTI CPU: 9 UID: 0 PID: 3380 Comm: kworker/u193:11 Not tainted 6.13.3-cm4all1-hp #437 Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018 Workqueue: events_unbound netfs_write_collection_worker RIP: 0010:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 0018:ffff9b86e2ca7dc0 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7fffffffffffffff RDX: 0000000000000001 RSI: ffff89259d576a18 RDI: ffff89259d576900 RBP: ffff89259d5769b0 R08: ffff9b86e2ca7d28 R09: 0000000000000002 R10: ffff89258ceaca80 R11: 0000000000000001 R12: 0000000000000020 R13: ffff893d158b9338 R14: ffff89259d576900 R15: ffff89259d5769b0 FS: 0000000000000000(0000) GS:ffff893c9fa40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000054442e003 CR4: 00000000001706f0 Call Trace: <TASK> ? __die+0x1f/0x60 ? page_fault_oops+0x15c/0x460 ? try_to_wake_up+0x2d2/0x530 ? exc_page_fault+0x5e/0x100 ? asm_exc_page_fault+0x22/0x30 netfs_write_collection_worker+0xe9f/0x12b0 ? xs_poll_check_readable+0x3f/0x80 ? xs_stream_data_receive_workfn+0x8d/0x110 process_one_work+0x134/0x2d0 worker_thread+0x299/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xba/0xe0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x30/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: CR2: 0000000000000000 This patch adds the missing `NULL` check. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22002"> read more </a> </article> <hr> <article> <h3> CVE-2025-22003 - Linux Kernel CAN Ucan Out-of-Bound Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22003 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound read in strscpy() source Commit 7fdaf8966aae ("can: ucan: use strscpy() to instead of strncpy()") unintentionally introduced a one byte out of bound read on strscpy()'s source argument (which is kind of ironic knowing that strscpy() is meant to be a more secure alternative :)). Let's consider below buffers: dest[len + 1]; /* will be NUL terminated */ src[len]; /* may not be NUL terminated */ When doing: strncpy(dest, src, len); dest[len] = '\0'; strncpy() will read up to len bytes from src. On the other hand: strscpy(dest, src, len + 1); will read up to len + 1 bytes from src, that is to say, an out of bound read of one byte will occur on src if it is not NUL terminated. Note that the src[len] byte is never copied, but strscpy() still needs to read it to check whether a truncation occurred or not. This exact pattern happened in ucan. The root cause is that the source is not NUL terminated. Instead of doing a copy in a local buffer, directly NUL terminate it as soon as usb_control_msg() returns. With this, the local firmware_str[] variable can be removed. On top of this do a couple refactors: - ucan_ctl_payload->raw is only used for the firmware string, so rename it to ucan_ctl_payload->fw_str and change its type from u8 to char. - ucan_device_request_in() is only used to retrieve the firmware string, so rename it to ucan_get_fw_str() and refactor it to make it directly handle all the string termination logic. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22003"> read more </a> </article> <hr> <article> <h3> CVE-2025-22004 - Linux Kernel Use After Free Vulnerability in ATM Net </h3> <p> <strong>CVE ID : </strong>CVE-2025-22004 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22004"> read more </a> </article> <hr> <article> <h3> CVE-2025-22005 - Linux Kernel IPv6 Memory Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22005 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails. Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6_nh") moved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init() but forgot to add cleanup for fib6_nh->nh_common.nhc_pcpu_rth_output in case it fails to allocate fib6_nh->rt6i_pcpu, resulting in memleak. Let's call fib_nh_common_release() and clear nhc_pcpu_rth_output in the error path. Note that we can remove the fib6_nh_release() call in nh_create_ipv6() later in net-next.git. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22005"> read more </a> </article> <hr> <article> <h3> CVE-2025-22006 - Cisco Ethernet Linux Kernel NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22006 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence Registering the interrupts for TX or RX DMA Channels prior to registering their respective NAPI callbacks can result in a NULL pointer dereference. This is seen in practice as a random occurrence since it depends on the randomness associated with the generation of traffic by Linux and the reception of traffic from the wire. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22006"> read more </a> </article> <hr> <article> <h3> CVE-2025-22007 - Linux Bluetooth NULL Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-22007 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in chan_alloc_skb_cb() The chan_alloc_skb_cb() function is supposed to return error pointers on error. Returning NULL will lead to a NULL dereference. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22007"> read more </a> </article> <hr> <article> <h3> CVE-2025-2874 - WordPress User Submitted Posts Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2874 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20240319 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. <br> <strong>Severity:</strong> 4.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2874"> read more </a> </article> <hr> <article> <h3> CVE-2025-3149 - "ITing Student Homework Management System Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3149 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been classified as problematic. Affected is an unknown function of the file /shw_war/fileupload of the component Edit Job Page. The manipulation of the argument Course leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. <br> <strong>Severity:</strong> 2.4 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3149"> read more </a> </article> <hr> <article> <h3> CVE-2025-3150 - "Inting Student Homework Management System Cross-Site Request Forgery Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3150 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints might be affected. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3150"> read more </a> </article> <hr> <article> <h3> CVE-2025-3151 - SourceCodester Gym Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3151 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument user_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3151"> read more </a> </article> <hr> <article> <h3> CVE-2025-3152 - Caipeichao ThinkOX Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3152 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 5 hours, 43 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in caipeichao ThinkOX 1.0. This affects an unknown part of the file /ThinkOX-master/index.php?s=/Weibo/Index/search.html of the component Search. The manipulation of the argument keywords leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.5 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3152"> read more </a> </article> <hr> <article> <h3> CVE-2024-13673 - WordPress Big Boom Directory Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13673 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>The Big Boom Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bbd-search' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13673"> read more </a> </article> <hr> <article> <h3> CVE-2025-1663 - Elementor Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1663 <br> <strong>Published : </strong> April 3, 2025, 8:15 a.m. | 3 hours, 43 minutes ago <br> <strong>Description : </strong>The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1663"> read more </a> </article> <hr> <article> <h3> CVE-2025-3145 - MindSpore FFT Local Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3145 <br> <strong>Published : </strong> April 3, 2025, 7:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3145"> read more </a> </article> <hr> <article> <h3> CVE-2025-3146 - PHPGurukul Bus Pass Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3146 <br> <strong>Published : </strong> April 3, 2025, 7:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3146"> read more </a> </article> <hr> <article> <h3> CVE-2025-3147 - PHPGurukul Boat Booking System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3147 <br> <strong>Published : </strong> April 3, 2025, 7:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3147"> read more </a> </article> <hr> <article> <h3> CVE-2025-3148 - "Codeprojects Product Management System Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3148 <br> <strong>Published : </strong> April 3, 2025, 7:15 a.m. | 4 hours, 42 minutes ago <br> <strong>Description : </strong>A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3148"> read more </a> </article> <hr> <article> <h3> CVE-2025-30485 - FutureNet Router Symlink Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30485 <br> <strong>Published : </strong> April 3, 2025, 7:15 a.m. | 1 hour, 56 minutes ago <br> <strong>Description : </strong>UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files. <br> <strong>Severity:</strong> 6.2 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30485"> read more </a> </article> <hr> <article> <h3> Le centre de certification de l’ANSSI émet ses premiers certificats EUCC </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Le centre de certification de l’ANSSI émet ses premiers certificats EUCC </span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_schema_eucc.png?h=284f21b9&itok=mPNvBm6s"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_schema_eucc.png?h=284f21b9&itok=r6vkbIzu"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_schema_eucc.png?h=284f21b9&itok=RjL59fI6"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_schema_eucc.png?h=284f21b9&itok=mQKvbC9W"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_schema_eucc.png?h=284f21b9&itok=mPNvBm6s" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-03T06:40:40+00:00" title="Jeudi 3 Avril 2025 - 06:40" class="datetime">jeu 03/04/2025 - 06:40</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Un an après l’adoption du schéma de certification européen EUCC, l’ANSSI reçoit l’accréditation du Cofrac et publie deux premiers certificats EUCC.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Le <strong>schéma européen de certification selon les critères communs ( EUCC)</strong> est entré en vigueur en février 2024 dans le cadre de la mise en œuvre du règlement européen sur la cybersécurité (<em><a href="https://cyber.gouv.fr/cybersecurity-act">Cybersecurity Act</a></em><u>)</u>. Il vise à garantir que les produits des technologies de l’information et de la communication tels que les composants technologiques, le matériel et les logiciels, répondent à des normes de sécurité strictes. Le but : renforcer la cybersécurité et garantir la cohérence des approches dans l’ensemble de l’Union européenne.</p> <p>L’ANSSI est l’autorité nationale de certification de cybersécurité, à double titre. D’une part, l<strong>e Centre de certification national de l’ANSSI (CCN) est en charge de délivrer les certifications pour le niveau élevé du schéma EUCC</strong>. Au cours de l’année écoulée, les équipes de l’ANSSI et leurs partenaires se sont mis en ordre de bataille afin de pouvoir délivrer, sous les meilleurs délais, des certificats EUCC. D’autre part, <strong>la Mission Contrôles et Supervision de l’ANSSI instruit la procédure d’autorisation des organismes d’évaluation de la conformité</strong> nécessaire au préalable.</p> <p>Le Centre de certification national a reçu l’accréditation du Cofrac le 28 mars dernier, puis l’autorisation de la Mission Contrôles et Supervision pour certifier les produits appartenant aux 3 domaines « Cartes à puce et dispositifs similaires », « Dispositifs matériels avec boîtiers de sécurité » et « Produits réseaux ou logiciels génériques »<sup>1</sup> . En parallèle, le centre d’évaluation de la sécurité (CESTI) Serma Safety & Security, avec lequel travaille CCN, a lui-même été accrédité et autorisé. <a href="https://certification.enisa.europa.eu/certificates_en"><strong>Deux certificats EUCC ont ainsi pu être émis par l’ANSSI</strong></a> le 31 mars 2025, suite à des évaluations conduites par Serma Safety & Security, pour les solutions des entreprises STMicroelectronics et Thales DIS France. Les certificats en question sont les premiers certificats EUCC à être publiés en Europe.</p> <p><strong>Certificats EUCC : quelles modalités ?</strong></p> <p>Depuis le 27 février 2025, tous les enregistrements de produits à évaluer selon les critères communs se font par une certification EUCC (hors cas spécifiques de défense et sécurité nationale).</p> <p>Les certificats EUCC sont <strong>valables cinq ans</strong>, avec des conditions de maintien et de surveillance clairement définies dans le schéma. Ces dernières permettent de garantir la pérennité de la sécurité des solutions.</p> <p><strong>Le formulaire de dossier d’évaluation est disponible </strong><a href="https://cyber.gouv.fr/documents-applicables-la-certification-criteres-communs-cc"><strong>ici</strong></a>.</p> <p>Par ailleurs, les certificats EUCC ne remplacent pas le schéma <a href="https://cyber.gouv.fr/presentation-de-la-certification-de-securite-de-premier-niveau-cspn">CSPN</a> (certification de premier niveau) de l’ANSSI.</p> <p>Plus d’informations sur EUCC :</p> <ul><li><a href="https://certification.enisa.europa.eu/certification-library/eucc-certification-scheme_en">Site de l’ENISA (anglais)</a></li> <li><a href="https://eur-lex.europa.eu/FR/legal-content/summary/european-common-criteria-based-cybersecurity-certification-scheme-eucc.html">Site de l’Union Européenne</a></li> <li><a href="https://cyber.gouv.fr/cybersecurity-act">Site de l’ANSSI</a></li> </ul></div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--default"> <figure role="figure" aria-label="Certification EUCC"><a data-lightbox="public://image/anssi-eucc-certification.png" data-title=" Certification EUCC" data-alt="" href="https://cyber.gouv.fr/sites/default/files/image/anssi-eucc-certification.png" class="lightbox-img"> <img src="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/anssi-eucc-certification.png?itok=7z3EM2Gs" alt="" /></a> <figcaption>Certification EUCC</figcaption></figure></div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p><sub><em>1 Pour les niveaux d’assurance AVA_VAN3, AVA_VAN4 et AVA_VAN5 (niveau « élevé »).</em></sub></p> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 03 Apr 2025 06:40:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/le-centre-de-certification-de-lanssi-emet-ses-premiers-certificats-eucc"> read more </a> </article> <hr> <article> <h3> CVE-2025-3136 - PyTorch CUDA Caching Allocator Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3136 <br> <strong>Published : </strong> April 3, 2025, 4:15 a.m. | 47 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3136"> read more </a> </article> <hr> <article> <h3> CVE-2025-3137 - PHPGurukul Online Security Guards Hiring System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3137 <br> <strong>Published : </strong> April 3, 2025, 4:15 a.m. | 47 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3137"> read more </a> </article> <hr> <article> <h3> CVE-2025-3138 - PHPGurukul Online Security Guards Hiring System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3138 <br> <strong>Published : </strong> April 3, 2025, 4:15 a.m. | 47 minutes ago <br> <strong>Description : </strong>A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 7.3 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3138"> read more </a> </article> <hr> <article> <h3> CVE-2025-3139 - Code-projects Bus Reservation System Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3139 <br> <strong>Published : </strong> April 3, 2025, 4:15 a.m. | 47 minutes ago <br> <strong>Description : </strong>A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3139"> read more </a> </article> <hr> <article> <h3> CVE-2025-29991 - Yubico YubiKey FIDO CTAP PIN/UV Auth Protocol Two Signature Verification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29991 <br> <strong>Published : </strong> April 3, 2025, 3:15 a.m. | 1 hour, 48 minutes ago <br> <strong>Description : </strong>Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/UV Auth Protocol One, even when CTAP PIN/UV Auth Protocol Two was chosen, resulting in a partial signature verification. <br> <strong>Severity:</strong> 2.2 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29991"> read more </a> </article> <hr> <article> <h3> CVE-2025-2784 - Libsoup HTTP Response Heap Buffer Over-Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2784 <br> <strong>Published : </strong> April 3, 2025, 3:15 a.m. | 1 hour, 48 minutes ago <br> <strong>Description : </strong>A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. <br> <strong>Severity:</strong> 7.0 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2784"> read more </a> </article> <hr> <article> <h3> CVE-2025-3134 - Code-Projects Payroll Management System SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3134 <br> <strong>Published : </strong> April 3, 2025, 2:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3134"> read more </a> </article> <hr> <article> <h3> CVE-2025-3135 - "fcba_zzm ICS-Park Smart Park Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3135 <br> <strong>Published : </strong> April 3, 2025, 2:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as critical was found in fcba_zzm ics-park Smart Park Management System 2.1. This vulnerability affects unknown code of the file /api/system/dept/update. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3135"> read more </a> </article> <hr> <article> <h3> CVE-2025-3153 - Concrete CMS Address Attribute Cross-Site Request Forgery and Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3153 <br> <strong>Published : </strong> April 3, 2025, 2:15 a.m. | 2 hours, 48 minutes ago <br> <strong>Description : </strong>Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vulnerable to CSRF and XSS in the Concrete CMS Address attribute because addresses are not properly sanitized in the output when a country is not specified. Attackers are limited to individuals whom a site administrator has granted the ability to fill in an address attribute. It is possible for the attacker to glean limited information from the site but amount and type is restricted by mitigating controls and the level of access of the attacker. Limited data modification is possible. The dashboard page itself could be rendered unavailable. The fix only sanitizes new data uploaded post update to Concrete CMS 9.4.0RC2. Existing database entries added before the update will still be “live” if there were successful exploits added under previous versions; a database search is recommended. The Concrete CMS security team gave this vulnerability CVSS v.4.0 score of 5.1 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L Thanks Myq Larson for reporting. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Thu, 03 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3153"> read more </a> </article> <hr> <article> <h3> CVE-2025-3123 - WonderCMS Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3123 <br> <strong>Published : </strong> April 2, 2025, 11:15 p.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateModuleAction of the component Theme Installation/Plugin Installation. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains, that "[t]he philosophy has always been, admin [...] bear responsibility to not install themes/plugins from untrusted sources." <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3123"> read more </a> </article> <hr> <article> <h3> CVE-2025-3154 - Xpdf Out-of-bounds Array Write Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3154 <br> <strong>Published : </strong> April 2, 2025, 11:15 p.m. | 5 hours, 48 minutes ago <br> <strong>Description : </strong>Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3154"> read more </a> </article> <hr> <article> <h3> CVE-2025-0257 - HCL DevOps Deploy/HCL Launch Agent Relay Authentication Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0257 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0257"> read more </a> </article> <hr> <article> <h3> CVE-2025-27608 - Arduino IDE Theia Framework Electron Self Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-27608 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences -> Settings section of the Arduino IDE interface. In the vulnerable versions, any values entered in this field are directly displayed to the user through a notification tooltip object, without a proper output encoding routine, due to the underlying ElectronJS engine interpretation. This vulnerability exposes the input parameter to Self-XSS attacks, which may lead to security risks depending on where the malicious payload is injected. This vulnerability is fixed in 2.3.5. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27608"> read more </a> </article> <hr> <article> <h3> CVE-2025-30218 - Next.js Cross-Origin Request Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-30218 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30218"> read more </a> </article> <hr> <article> <h3> CVE-2025-31477 - Tauri Shell Plugin Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31477 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open on Linux). This was meant to be restricted to a reasonable number of protocols like https or mailto by default. This default restriction was not functional due to improper validation of the allowed protocols, allowing for potentially dangerous protocols like file://, smb://, or nfs:// and others to be opened by the system registered protocol handler. By passing untrusted user input to the open endpoint these potentially dangerous protocols can be abused to gain remote code execution on the system. This either requires direct exposure of the endpoint to application users or code execution in the frontend of a Tauri application. This vulnerability is fixed in 2.2.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31477"> read more </a> </article> <hr> <article> <h3> CVE-2025-31479 - GitHub Get-Workflow-Version-Action Token Truncation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31479 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the full token is included in the exception output, GitHub will automatically redact the secret from the GitHub Actions logs. However, the token may be truncated—causing part of the GITHUB_TOKEN to be displayed in plaintext in the GitHub Actions logs. Anyone with read access to the GitHub repository can view GitHub Actions logs. For public repositories, anyone can view the GitHub Actions logs. The opportunity to exploit this vulnerability is limited—the GITHUB_TOKEN is automatically revoked when the job completes. However, there is an opportunity for an attack in the time between the GITHUB_TOKEN being displayed in the logs and the completion of the job. Users using the github-token input are impacted. This vulnerability is fixed in 1.0.1. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31479"> read more </a> </article> <hr> <article> <h3> CVE-2025-31484 - Conda-Forge Azure CF-Staging Token Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-31484 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31484"> read more </a> </article> <hr> <article> <h3> CVE-2025-3119 - SourceCodester Online Tutor Portal SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3119 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/manage_course.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3119"> read more </a> </article> <hr> <article> <h3> CVE-2025-3120 - "SourceCodester Apartment Visitors Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3120 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3120"> read more </a> </article> <hr> <article> <h3> CVE-2025-3121 - PyTorch Memory Corruption (Local Access) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3121 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.3 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3121"> read more </a> </article> <hr> <article> <h3> CVE-2025-3122 - Microsoft WebAssembly wabt Null Pointer Dereference Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3122 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 3.1 | LOW <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3122"> read more </a> </article> <hr> <article> <h3> CVE-2025-3129 - Drupal Access Code Excessive Authentication Brute Force Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3129 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3129"> read more </a> </article> <hr> <article> <h3> CVE-2025-3130 - Drupal Obfuscate Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-3130 <br> <strong>Published : </strong> April 2, 2025, 10:15 p.m. | 6 hours, 48 minutes ago <br> <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3130"> read more </a> </article> <hr> <article> <h3> CVE-2025-30080 - Pexip Infinity Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-30080 <br> <strong>Published : </strong> April 2, 2025, 9:15 p.m. | 7 hours, 47 minutes ago <br> <strong>Description : </strong>Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30080"> read more </a> </article> <hr> <article> <h3> CVE-2025-3118 - SourceCodester Online Tutor Portal SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-3118 <br> <strong>Published : </strong> April 2, 2025, 9:15 p.m. | 7 hours, 47 minutes ago <br> <strong>Description : </strong>A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/view_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <br> <strong>Severity:</strong> 6.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3118"> read more </a> </article> <hr> <article> <h3> CVE-2024-56474 - IBM TXSeries for Multiplatforms CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56474 <br> <strong>Published : </strong> April 2, 2025, 4:17 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 16:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56474"> read more </a> </article> <hr> <article> <h3> CVE-2024-56475 - IBM TXSeries for Multiplatforms Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2024-56475 <br> <strong>Published : </strong> April 2, 2025, 4:17 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 16:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56475"> read more </a> </article> <hr> <article> <h3> CVE-2024-56476 - IBM TXSeries for Multiplatforms Authentication Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-56476 <br> <strong>Published : </strong> April 2, 2025, 4:17 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login attempt response discrepancy. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 16:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56476"> read more </a> </article> <hr> <article> <h3> CVE-2025-0154 - IBM TXSeries for Multiplatforms HTTP Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0154 <br> <strong>Published : </strong> April 2, 2025, 4:17 p.m. | 2 hours, 42 minutes ago <br> <strong>Description : </strong>IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 16:17:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0154"> read more </a> </article> <hr> <article> <h3> CVE-2025-31725 - Jenkins Monitor-Remote-Job Plugin Unencrypted Password Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31725 <br> <strong>Published : </strong> April 2, 2025, 3:16 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31725"> read more </a> </article> <hr> <article> <h3> CVE-2025-31726 - Jenkins Stack Hammer Plugin Unencrypted API Key Storage Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31726 <br> <strong>Published : </strong> April 2, 2025, 3:16 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31726"> read more </a> </article> <hr> <article> <h3> CVE-2025-31727 - Jenkins AsakusaSatellite Plugin Unencrypted API Key Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-31727 <br> <strong>Published : </strong> April 2, 2025, 3:16 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31727"> read more </a> </article> <hr> <article> <h3> CVE-2025-31728 - Jenkins AsakusaSatellite Plugin API Key Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31728 <br> <strong>Published : </strong> April 2, 2025, 3:16 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31728"> read more </a> </article> <hr> <article> <h3> CVE-2025-31721 - Jenkins Missing Permission Check Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31721 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31721"> read more </a> </article> <hr> <article> <h3> CVE-2025-31722 - Jenkins Templating Engine Plugin Sandbox Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-31722 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31722"> read more </a> </article> <hr> <article> <h3> CVE-2025-31723 - Jenkins Simple Queue Plugin CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31723 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31723"> read more </a> </article> <hr> <article> <h3> CVE-2025-31724 - Jenkins Cadence vManager Plugin Unencrypted API Key Exposure </h3> <p> <strong>CVE ID : </strong>CVE-2025-31724 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 3 hours, 44 minutes ago <br> <strong>Description : </strong>Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31724"> read more </a> </article> <hr> <article> <h3> CVE-2024-25051 - IBM Jazz Reporting Service Session Impersonation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-25051 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 2 hours, 1 minute ago <br> <strong>Description : </strong>IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system. <br> <strong>Severity:</strong> 6.6 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-25051"> read more </a> </article> <hr> <article> <h3> CVE-2024-56341 - IBM Content Navigator Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-56341 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 2 hours, 1 minute ago <br> <strong>Description : </strong>IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. <br> <strong>Severity:</strong> 5.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56341"> read more </a> </article> <hr> <article> <h3> CVE-2025-31720 - Jenkins Missing Permission Check Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31720 <br> <strong>Published : </strong> April 2, 2025, 3:15 p.m. | 2 hours, 1 minute ago <br> <strong>Description : </strong>A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 15:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31720"> read more </a> </article> <hr> <article> <h3> CVE-2025-21994 - Linux ksmbd Integer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21994 <br> <strong>Published : </strong> April 2, 2025, 2:16 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for num_aces field of smb_acl parse_dcal() validate num_aces to allocate posix_ace_state_array. if (num_aces > ULONG_MAX / sizeof(struct smb_ace *)) It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:16:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21994"> read more </a> </article> <hr> <article> <h3> CVE-2024-45064 - STMicroelectronics X-CUBE-AZRTOS-WL Buffer Overflow Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-45064 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability. <br> <strong>Severity:</strong> 8.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45064"> read more </a> </article> <hr> <article> <h3> CVE-2024-50384 - STMicroelectronics X-CUBE-AZRTOS-WL NetX Component HTTP Server Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-50384 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50384"> read more </a> </article> <hr> <article> <h3> CVE-2024-50385 - STMicroelectronics X-CUBE-AZRTOS-WL NetX Component HTTP Server Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-50385 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server HTTP server v 1.1.0. This HTTP server implementation is contained in this file - x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50385"> read more </a> </article> <hr> <article> <h3> CVE-2024-50594 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-50594 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50594"> read more </a> </article> <hr> <article> <h3> CVE-2024-50595 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-50595 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50595"> read more </a> </article> <hr> <article> <h3> CVE-2024-50596 - STMicroelectronics X-CUBE-AZRTOS-WL Denial of Service Integer Underflow </h3> <p> <strong>CVE ID : </strong>CVE-2024-50596 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50596"> read more </a> </article> <hr> <article> <h3> CVE-2024-50597 - STMicroelectronics X-CUBE-AZRTOS-WL HTTP Server Integer Underflow Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-50597 <br> <strong>Published : </strong> April 2, 2025, 2:15 p.m. | 3 hours, 1 minute ago <br> <strong>Description : </strong>An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 14:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-50597"> read more </a> </article> <hr> <article> <h3> CVE-2025-27556 - Django Denial-of-Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27556 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 4 hours, 1 minute ago <br> <strong>Description : </strong>An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. <br> <strong>Severity:</strong> 5.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27556"> read more </a> </article> <hr> <article> <h3> CVE-2025-30090 - SquirrelMail MIME PHP XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30090 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 4 hours, 1 minute ago <br> <strong>Description : </strong>mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true. <br> <strong>Severity:</strong> 7.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30090"> read more </a> </article> <hr> <article> <h3> CVE-2025-1805 - Crypt::Salt for Perl Insecure Salt Generation </h3> <p> <strong>CVE ID : </strong>CVE-2025-1805 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1805"> read more </a> </article> <hr> <article> <h3> CVE-2025-21987 - AMDGPU Uninitialized Value Return Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21987 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: init return value in amdgpu_ttm_clear_buffer Otherwise an uninitialized value can be returned if amdgpu_res_cleared returns true for all regions. Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812 (cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21987"> read more </a> </article> <hr> <article> <h3> CVE-2025-21988 - Linux Kernel Netfs Read Collect Data Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21988 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front"). <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21988"> read more </a> </article> <hr> <article> <h3> CVE-2025-21989 - AMDGPU NULL Pointer Dereference </h3> <p> <strong>CVE ID : </strong>CVE-2025-21989 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix missing .is_two_pixels_per_container Starting from 6.11, AMDGPU driver, while being loaded with amdgpu.dc=1, due to lack of .is_two_pixels_per_container function in dce60_tg_funcs, causes a NULL pointer dereference on PCs with old GPUs, such as R9 280X. So this fix adds missing .is_two_pixels_per_container to dce60_tg_funcs. (cherry picked from commit bd4b125eb949785c6f8a53b0494e32795421209d) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21989"> read more </a> </article> <hr> <article> <h3> CVE-2025-21990 - AMDGPU NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21990 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing. (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21990"> read more </a> </article> <hr> <article> <h3> CVE-2025-21991 - AMD CPU Microcode Out-of-Bounds Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21991 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses per-CPU data for the first CPU of each mask. According to Documentation/admin-guide/mm/numaperf.rst: "Some memory may share the same node as a CPU, and others are provided as memory only nodes." Therefore, some node CPU masks may be empty and wouldn't have a "first CPU". On a machine with far memory (and therefore CPU-less NUMA nodes): - cpumask_of_node(nid) is 0 - cpumask_first(0) is CONFIG_NR_CPUS - cpu_data(CONFIG_NR_CPUS) accesses the cpu_info per-CPU array at an index that is 1 out of bounds This does not have any security implications since flashing microcode is a privileged operation but I believe this has reliability implications by potentially corrupting memory while flashing a microcode update. When booting with CONFIG_UBSAN_BOUNDS=y on an AMD machine that flashes a microcode update. I get the following splat: UBSAN: array-index-out-of-bounds in arch/x86/kernel/cpu/microcode/amd.c:X:Y index 512 is out of range for type 'unsigned long[512]' [...] Call Trace: dump_stack __ubsan_handle_out_of_bounds load_microcode_amd request_microcode_amd reload_store kernfs_fop_write_iter vfs_write ksys_write do_syscall_64 entry_SYSCALL_64_after_hwframe Change the loop to go over only NUMA nodes which have CPUs before determining whether the first CPU on the respective node needs microcode update. [ bp: Massage commit message, fix typo. ] <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21991"> read more </a> </article> <hr> <article> <h3> CVE-2025-21992 - HP 5MP Camera HID Sensor Interface Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-21992 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: HID: ignore non-functional sensor in HP 5MP Camera The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21992"> read more </a> </article> <hr> <article> <h3> CVE-2025-21993 - IBM iSCSI IPv6 Subnet Mask Out-of-Bounds Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21993 <br> <strong>Published : </strong> April 2, 2025, 1:15 p.m. | 1 hour, 3 minutes ago <br> <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix length is 64, this causes the shift exponent to become negative, triggering a UBSAN warning. As the concept of a subnet mask does not apply to IPv6, the value is set to ~0 to suppress the warning message. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21993"> read more </a> </article> <hr> <article> <h3> CVE-2025-2842 - Tempo Operator ClusterRoleBinding Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-2842 <br> <strong>Published : </strong> April 2, 2025, 12:15 p.m. | 2 hours, 4 minutes ago <br> <strong>Description : </strong>A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole. This can be exploited if a user has 'create' permissions on TempoStack and 'get' permissions on Secret in a namespace (for example, a user has ClusterAdmin permissions for a specific namespace), as the user can read the token of the Tempo service account and therefore has access to see all cluster metrics. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2842"> read more </a> </article> <hr> <article> <h3> CVE-2025-2786 - Tempo Operator Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-2786 <br> <strong>Published : </strong> April 2, 2025, 11:15 a.m. | 3 hours, 3 minutes ago <br> <strong>Description : </strong>A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks. <br> <strong>Severity:</strong> 4.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2786"> read more </a> </article> <hr> <article> <h3> CVE-2024-12410 - WordPress Front End Users SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12410 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12410"> read more </a> </article> <hr> <article> <h3> CVE-2024-13637 - WordPress Demo Awesome Plugin Unauthenticated Plugin Installation </h3> <p> <strong>CVE ID : </strong>CVE-2024-13637 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins.. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13637"> read more </a> </article> <hr> <article> <h3> CVE-2025-2005 - WordPress Front End Users Arbitrary File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2005 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. <br> <strong>Severity:</strong> 9.8 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2005"> read more </a> </article> <hr> <article> <h3> CVE-2025-2483 - WordPress Gift Certificate Creator Reflected Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2483 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 4 minutes ago <br> <strong>Description : </strong>The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receip_address’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2483"> read more </a> </article> <hr> <article> <h3> CVE-2025-2513 - WordPress Smart Icons Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2513 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The Smart Icons For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. <br> <strong>Severity:</strong> 6.4 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2513"> read more </a> </article> <hr> <article> <h3> CVE-2025-3063 - WordPress Shopper Approved Reviews Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3063 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_callback_update_sa_option() function in versions 2.0 to 2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. <br> <strong>Severity:</strong> 8.8 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3063"> read more </a> </article> <hr> <article> <h3> CVE-2025-3097 - WordPress Time Machine CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-3097 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The wp Time Machine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.0. This is due to missing or incorrect nonce validation on the 'wpTimeMachineCore.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3097"> read more </a> </article> <hr> <article> <h3> CVE-2025-3098 - WordPress Video Url Reflected Cross-Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-3098 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The Video Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.0.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3098"> read more </a> </article> <hr> <article> <h3> CVE-2025-3099 - WordPress My Solr Server CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-3099 <br> <strong>Published : </strong> April 2, 2025, 10:15 a.m. | 4 hours, 3 minutes ago <br> <strong>Description : </strong>The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. <br> <strong>Severity:</strong> 6.1 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3099"> read more </a> </article> <hr> <article> <h3> L’ANSSI lance son offre de services : MesServicesCyber </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI lance son offre de services : MesServicesCyber </span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-web-mes-services-cyber-v4.png?h=284f21b9&itok=NOtDuo0B"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu-web-mes-services-cyber-v4.png?h=284f21b9&itok=viRy3rym"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu-web-mes-services-cyber-v4.png?h=284f21b9&itok=SmQZkEev"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu-web-mes-services-cyber-v4.png?h=284f21b9&itok=zA6I79Ge"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu-web-mes-services-cyber-v4.png?h=284f21b9&itok=NOtDuo0B" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-04-02T08:16:29+00:00" title="Mercredi 2 Avril 2025 - 08:16" class="datetime">mer 02/04/2025 - 08:16</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Pour accompagner le renforcement de la cybersécurité des entités publiques et privées françaises, l’ANSSI lance MesServicesCyber. Cette plateforme d’offre de services permet de découvrir les services et ressources proposés par l’Agence, en réponse aux besoins des bénéficiaires. </div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>L’ANSSI est appelée à accompagner un nombre toujours plus important de bénéficiaires : c’est pourquoi l’Agence repense ses modes d’action et ses outils en étant à l’écoute des attentes des bénéficiaires. MesServicesCyber est la dernière innovation du Laboratoire d’innovation publique de l’ANSSI qui vise à rendre plus lisibles et accessibles les ressources et l’offre de services codéveloppés avec les experts métiers de l’ANSSI.</p> <p><strong><u>Est-ce que je peux utiliser MesServicesCyber ?</u></strong></p> <p>MesServicesCyber s’adresse à toutes les entités publiques et privées souhaitant renforcer leur cybersécurité. MesServicesCyber possède, cependant, deux cibles prioritaires auxquelles est réservé l’accès à certains services numériques : les entités régulées (et particulièrement les entités qui seront régulées par la directive NIS 2) ainsi que les entités publiques (État, collectivités territoriales).</p> <p><strong><u>Que puis-je trouver sur MesServicesCyber ?</u></strong></p> <ul><li>Un catalogue de services et ressources proposés par l’ANSSI et certains partenaires publics, organisé autour des besoins (« sensibiliser », « se former », « sécuriser » et « réagir »).</li> <li>Trois sélections de services et de ressources : une « pour se lancer », une « pour approfondir » et une pour les entités qui seront régulées par la directive NIS 2, organisées autour des grandes obligations prévues par la directive (« s’informer », « s’enregistrer », « gérer les risques », « déclarer les incidents »).</li> <li>Un test de maturité cyber permettant une évaluation rapide et indicative du positionnement global d’une organisation sur les enjeux cyber. Il permet aux organisations de savoir où elles en sont, mais également aux entités chargées de les accompagner de proposer des dispositifs d’accompagnement adaptés.</li> </ul><p>MesServicesCyber propose également :</p> <ul><li>Un accès authentifié à un espace personnel permettant aux utilisateurs de conserver leurs services et ressources favoris, d’accéder à la liste des services numériques qu’ils utilisent déjà, de retrouver les résultats de leur test de maturité et une liste de contacts utiles.</li> <li>Un bouton d’aide et un service support en ligne.</li> </ul><p>Après son lancement, MesServicesCyber continuera à évoluer pour répondre aux attentes des bénéficiaires, auxquelles l’Agence restera très attentive.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://messervices.cyber.gouv.fr/" se="" rendre="" sur="" pour="" d="" messervicescyber="" c="" par="" ici=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Pour découvrir MesServicesCyber, c’est par ici ! </a> </div> </div> </div> </div> </p> <p class="feed-time"> Wed, 02 Apr 2025 08:16:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-lance-son-offre-de-services-messervicescyber"> read more </a> </article> <hr> <article> <h3> CVE-2023-40714 - Fortinet FortiSIEM Path Traversal Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2023-40714 <br> <strong>Published : </strong> April 2, 2025, 8:15 a.m. | 6 hours, 4 minutes ago <br> <strong>Description : </strong>A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements <br> <strong>Severity:</strong> 9.9 | CRITICAL <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-40714"> read more </a> </article> <hr> <article> <h3> CVE-2024-39780 - ROS dynparam YAML Deserialization Vulnerability (Arbitrary Code Execution) </h3> <p> <strong>CVE ID : </strong>CVE-2024-39780 <br> <strong>Published : </strong> April 2, 2025, 8:15 a.m. | 6 hours, 4 minutes ago <br> <strong>Description : </strong>A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the 'set' and 'get' verbs, and allows for the creation of arbitrary Python objects. Through this flaw, a local or remote user can craft and execute arbitrary Python code. This issue has now been fixed for ROS Noetic via commit 3d93ac13603438323d7e9fa74e879e45c5fe2e8e. <br> <strong>Severity:</strong> 8.4 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-39780"> read more </a> </article> <hr> <article> <h3> CVE-2025-0415 - F5 Networks NTP Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0415 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 7 hours, 3 minutes ago <br> <strong>Description : </strong>A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0415"> read more </a> </article> <hr> <article> <h3> CVE-2025-0676 - Moxa tcpdump Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-0676 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 7 hours, 3 minutes ago <br> <strong>Description : </strong>This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-0676"> read more </a> </article> <hr> <article> <h3> CVE-2024-36469 - Apache HTTP Server Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-36469 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 3 hours, 49 minutes ago <br> <strong>Description : </strong>Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-36469"> read more </a> </article> <hr> <article> <h3> CVE-2024-42325 - Zabbix Information Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2024-42325 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 3 hours, 49 minutes ago <br> <strong>Description : </strong>Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-42325"> read more </a> </article> <hr> <article> <h3> CVE-2024-45699 - Zabbix Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2024-45699 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 3 hours, 49 minutes ago <br> <strong>Description : </strong>The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45699"> read more </a> </article> <hr> <article> <h3> CVE-2024-45700 - Zabbix Server Memory Exhaustion Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2024-45700 <br> <strong>Published : </strong> April 2, 2025, 7:15 a.m. | 3 hours, 49 minutes ago <br> <strong>Description : </strong>Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, which will cause the server to allocate an excessive amount of memory and perform CPU-intensive decompression operations, ultimately leading to a service crash. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-45700"> read more </a> </article> <hr> <article> <h3> CVE-2024-36465 - Zabbix SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-36465 <br> <strong>Published : </strong> April 2, 2025, 6:15 a.m. | 4 hours, 49 minutes ago <br> <strong>Description : </strong>A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-36465"> read more </a> </article> <hr> <article> <h3> CVE-2025-25060 - AssetView Unauthenticated File Access and Deletion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25060 <br> <strong>Published : </strong> April 2, 2025, 4:15 a.m. | 6 hours, 49 minutes ago <br> <strong>Description : </strong>Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker. <br> <strong>Severity:</strong> 8.2 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25060"> read more </a> </article> <hr> <article> <h3> CVE-2025-27244 - AssetView Information Disclosure Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27244 <br> <strong>Published : </strong> April 2, 2025, 4:15 a.m. | 6 hours, 49 minutes ago <br> <strong>Description : </strong>AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker. <br> <strong>Severity:</strong> 5.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 04:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27244"> read more </a> </article> <hr> <article> <h3> CVE-2025-2779 - WordPress HT Script Plugin Unauthenticated Data Modification Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2779 <br> <strong>Published : </strong> April 2, 2025, 2:15 a.m. | 8 hours, 50 minutes ago <br> <strong>Description : </strong>The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration. <br> <strong>Severity:</strong> 6.5 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2779"> read more </a> </article> <hr> <article> <h3> CVE-2025-3071 - Google Chrome Navigation Same-Origin Policy Bypass Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3071 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 9 hours, 49 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3071"> read more </a> </article> <hr> <article> <h3> CVE-2025-3072 - Google Chrome Custom Tabs UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3072 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 9 hours, 49 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3072"> read more </a> </article> <hr> <article> <h3> CVE-2025-3073 - Google Chrome Autofill UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3073 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 9 hours, 49 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3073"> read more </a> </article> <hr> <article> <h3> CVE-2025-3074 - Google Chrome UI Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3074 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 9 hours, 49 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3074"> read more </a> </article> <hr> <article> <h3> CVE-2025-27693 - Dell Wyse Management Suite Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27693 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection. <br> <strong>Severity:</strong> 4.9 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27693"> read more </a> </article> <hr> <article> <h3> CVE-2025-27694 - Dell Wyse Management Suite Insufficient Resource Pool Denial of Service Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27694 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27694"> read more </a> </article> <hr> <article> <h3> CVE-2025-29981 - Dell Wyse Management Suite Exposure of Sensitive Information Through Data Queries Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29981 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. <br> <strong>Severity:</strong> 7.5 | HIGH <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29981"> read more </a> </article> <hr> <article> <h3> CVE-2025-29982 - Dell Wyse Management Suite Insecure Inherited Permissions Unauthorized Access Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-29982 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. <br> <strong>Severity:</strong> 6.8 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29982"> read more </a> </article> <hr> <article> <h3> CVE-2025-3066 - Google Chrome Use-After-Free in Navigations Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3066 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Use after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3066"> read more </a> </article> <hr> <article> <h3> CVE-2025-3067 - Google Chrome Android Custom Tabs Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3067 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3067"> read more </a> </article> <hr> <article> <h3> CVE-2025-3068 - Google Chrome Android Intents Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3068 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3068"> read more </a> </article> <hr> <article> <h3> CVE-2025-3069 - Google Chrome Extension Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3069 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3069"> read more </a> </article> <hr> <article> <h3> CVE-2025-3070 - Google Chrome Extension Input Validation Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3070 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 7 hours, 36 minutes ago <br> <strong>Description : </strong>Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) <br> <strong>Severity:</strong> 0.0 | NA <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3070"> read more </a> </article> <hr> <article> <h3> CVE-2025-27692 - Dell Wyse Management Suite Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27692 <br> <strong>Published : </strong> April 2, 2025, 1:15 a.m. | 6 hours, 38 minutes ago <br> <strong>Description : </strong>Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution <br> <strong>Severity:</strong> 4.7 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Wed, 02 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27692"> read more </a> </article> <hr> <article> <h3> CVE-2025-31135 - Go-Guerrilla SMTP Daemon Reverse Proxy IP Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31135 <br> <strong>Published : </strong> April 1, 2025, 10:15 p.m. | 9 hours, 38 minutes ago <br> <strong>Description : </strong>Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7. <br> <strong>Severity:</strong> 5.3 | MEDIUM <br> Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31135"> read more </a> </article> <hr> <article> <h3> CVE-2023-46988 - ONLYOFFICE Document Server File Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2023-46988 <strong>Published : </strong> April 1, 2025, 10:15 p.m. | 5 hours, 37 minutes ago <strong>Description : </strong>Directory Traversal vulnerability in ONLYOFFICE Document Server v.7.5.0 and before allows a remote attacker to obtain sensitive information via a crafted file upload. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2023-46988"> read more </a> </article> <hr> <article> <h3> CVE-2025-30356 - "CryptoLib Heap Buffer Overflow Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-30356 <strong>Published : </strong> April 1, 2025, 10:15 p.m. | 5 hours, 37 minutes ago <strong>Description : </strong>CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomplete validation check on the fl (frame length) field. Although CVE-2025-29912 addressed an underflow issue involving fl, the patch fails to fully prevent unsafe calculations. As a result, an attacker can still craft malicious frames that cause a negative tf_payload_len, which is then interpreted as a large unsigned value, leading to a heap buffer overflow in a memcpy call. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 22:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30356"> read more </a> </article> <hr> <article> <h3> CVE-2025-31594 - WordPress Auto Scroll for Reading Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31594 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPglob Auto scroll for reading allows Reflected XSS. This issue affects Auto scroll for reading: from n/a through 1.1.4. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31594"> read more </a> </article> <hr> <article> <h3> CVE-2025-31612 - Sabuj Kundu CBX Poll Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31612 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll allows Object Injection. This issue affects CBX Poll: from n/a through 1.2.7. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31612"> read more </a> </article> <hr> <article> <h3> CVE-2025-31619 - Actionwear SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-31619 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync allows SQL Injection. This issue affects Actionwear products sync: from n/a through 2.3.3. <strong>Severity:</strong> 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31619"> read more </a> </article> <hr> <article> <h3> CVE-2025-31628 - SlicedInvoices Missing Authorization </h3> <p> <strong>CVE ID : </strong>CVE-2025-31628 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in SlicedInvoices Sliced Invoices. This issue affects Sliced Invoices: from n/a through 3.9.4. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31628"> read more </a> </article> <hr> <article> <h3> CVE-2025-31753 - Animesh Kumar Advanced Speed Increaser CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31753 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advanced Speed Increaser. This issue affects Advanced Speed Increaser: from n/a through 2.2.1. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31753"> read more </a> </article> <hr> <article> <h3> CVE-2025-31819 - Pixelgrade Nova Blocks Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31819 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Nova Blocks by Pixelgrade. This issue affects Nova Blocks by Pixelgrade: from n/a through 2.1.8. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31819"> read more </a> </article> <hr> <article> <h3> CVE-2025-31889 - Elementor Extensions Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31889 <strong>Published : </strong> April 1, 2025, 9:15 p.m. | 6 hours, 37 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor. This issue affects Extensions for Elementor: from n/a through 2.0.40. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 21:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31889"> read more </a> </article> <hr> <article> <h3> CVE-2025-25041 - Aruba Networking VIA Client File Overwrite Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-25041 <strong>Published : </strong> April 1, 2025, 5:15 p.m. | 35 minutes ago <strong>Description : </strong>A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients. <strong>Severity:</strong> 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-25041"> read more </a> </article> <hr> <article> <h3> CVE-2025-27829 - Stormshield Network Security Multicast Traffic Interruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-27829 <strong>Published : </strong> April 1, 2025, 5:15 p.m. | 35 minutes ago <strong>Description : </strong>An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27829"> read more </a> </article> <hr> <article> <h3> CVE-2025-28131 - Nagios Network Analyzer Broken Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28131 <strong>Published : </strong> April 1, 2025, 5:15 p.m. | 35 minutes ago <strong>Description : </strong>A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28131"> read more </a> </article> <hr> <article> <h3> CVE-2025-28132 - Nagios Network Analyzer Session Reuse Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-28132 <strong>Published : </strong> April 1, 2025, 5:15 p.m. | 35 minutes ago <strong>Description : </strong>A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 17:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-28132"> read more </a> </article> <hr> <article> <h3> CVE-2025-21966 - Linux Kernel dm-flakey Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21966 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21966"> read more </a> </article> <hr> <article> <h3> CVE-2025-21967 - Samba Linux Kernel Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21967 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock break wait is needed. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21967"> read more </a> </article> <hr> <article> <h3> CVE-2025-21968 - AMD Display Slab-Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21968 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcp_work [Why] A slab-use-after-free is reported when HDCP is destroyed but the property_validate_dwork queue is still running. [How] Cancel the delayed work when destroying workqueue. (cherry picked from commit 725a04ba5a95e89c89633d4322430cfbca7ce128) <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21968"> read more </a> </article> <hr> <article> <h3> CVE-2025-21969 - Android Bluetooth L2CAP Slab-Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21969 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sending to the upper layer. Add hci dev lock to the hci receive data work queue to synchronize the two. [1] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954 Read of size 8 at addr ffff8880271a4000 by task kworker/u9:2/5837 CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:2 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: hci1 hci_rx_work Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x169/0x550 mm/kasan/report.c:489 kasan_report+0x143/0x180 mm/kasan/report.c:602 l2cap_build_cmd net/bluetooth/l2cap_core.c:2964 [inline] l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954 l2cap_sig_send_rej net/bluetooth/l2cap_core.c:5502 [inline] l2cap_sig_channel net/bluetooth/l2cap_core.c:5538 [inline] l2cap_recv_frame+0x221f/0x10db0 net/bluetooth/l2cap_core.c:6817 hci_acldata_packet net/bluetooth/hci_core.c:3797 [inline] hci_rx_work+0x508/0xdb0 net/bluetooth/hci_core.c:4040 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> Allocated by task 5837: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4329 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] l2cap_conn_add+0xa9/0x8e0 net/bluetooth/l2cap_core.c:6860 l2cap_connect_cfm+0x115/0x1090 net/bluetooth/l2cap_core.c:7239 hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline] hci_remote_features_evt+0x68e/0xac0 net/bluetooth/hci_event.c:3726 hci_event_func net/bluetooth/hci_event.c:7473 [inline] hci_event_packet+0xac2/0x1540 net/bluetooth/hci_event.c:7525 hci_rx_work+0x3f3/0xdb0 net/bluetooth/hci_core.c:4035 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Freed by task 54: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4613 [inline] kfree+0x196/0x430 mm/slub.c:4761 l2cap_connect_cfm+0xcc/0x1090 net/bluetooth/l2cap_core.c:7235 hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline] hci_conn_failed+0x287/0x400 net/bluetooth/hci_conn.c:1266 hci_abort_conn_sync+0x56c/0x11f0 net/bluetooth/hci_sync.c:5603 hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entr ---truncated--- <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21969"> read more </a> </article> <hr> <article> <h3> CVE-2025-21970 - "mlx5 Bridge LAG State Check Crash" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21970 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEV_CHANGEUPPER event is triggered. Driver finds the lower devices (PFs) to flush all the offloaded entries. And mlx5_lag_is_shared_fdb is checked, it returns false if one of PF is unloaded. In such case, mlx5_esw_bridge_lag_rep_get() and its caller return NULL, instead of the alive PF, and the flush is skipped. Besides, the bridge fdb entry's lastuse is updated in mlx5 bridge event handler. But this SWITCHDEV_FDB_ADD_TO_BRIDGE event can be ignored in this case because the upper interface for bond is deleted, and the entry will never be aged because lastuse is never updated. To make things worse, as the entry is alive, mlx5 bridge workqueue keeps sending that event, which is then handled by kernel bridge notifier. It causes the following crash when accessing the passed bond netdev which is already destroyed. To fix this issue, remove such checks. LAG state is already checked in commit 15f8f168952f ("net/mlx5: Bridge, verify LAG state when adding bond to bridge"), driver still need to skip offload if LAG becomes invalid state after initialization. Oops: stack segment: 0000 [#1] SMP CPU: 3 UID: 0 PID: 23695 Comm: kworker/u40:3 Tainted: G OE 6.11.0_mlnx #1 Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_bridge_wq mlx5_esw_bridge_update_work [mlx5_core] RIP: 0010:br_switchdev_event+0x2c/0x110 [bridge] Code: 44 00 00 48 8b 02 48 f7 00 00 02 00 00 74 69 41 54 55 53 48 83 ec 08 48 8b a8 08 01 00 00 48 85 ed 74 4a 48 83 fe 02 48 89 d3 <4c> 8b 65 00 74 23 76 49 48 83 fe 05 74 7e 48 83 fe 06 75 2f 0f b7 RSP: 0018:ffffc900092cfda0 EFLAGS: 00010297 RAX: ffff888123bfe000 RBX: ffffc900092cfe08 RCX: 00000000ffffffff RDX: ffffc900092cfe08 RSI: 0000000000000001 RDI: ffffffffa0c585f0 RBP: 6669746f6e690a30 R08: 0000000000000000 R09: ffff888123ae92c8 R10: 0000000000000000 R11: fefefefefefefeff R12: ffff888123ae9c60 R13: 0000000000000001 R14: ffffc900092cfe08 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88852c980000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f15914c8734 CR3: 0000000002830005 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? die+0x38/0x60 ? do_trap+0x10b/0x120 ? do_error_trap+0x64/0xa0 ? exc_stack_segment+0x33/0x50 ? asm_exc_stack_segment+0x22/0x30 ? br_switchdev_event+0x2c/0x110 [bridge] ? sched_balance_newidle.isra.149+0x248/0x390 notifier_call_chain+0x4b/0xa0 atomic_notifier_call_chain+0x16/0x20 mlx5_esw_bridge_update+0xec/0x170 [mlx5_core] mlx5_esw_bridge_update_work+0x19/0x40 [mlx5_core] process_scheduled_works+0x81/0x390 worker_thread+0x106/0x250 ? bh_worker+0x110/0x110 kthread+0xb7/0xe0 ? kthread_park+0x80/0x80 ret_from_fork+0x2d/0x50 ? kthread_park+0x80/0x80 ret_from_fork_asm+0x11/0x20 </TASK> <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21970"> read more </a> </article> <hr> <article> <h3> CVE-2025-21971 - "Linux Kernel net_sched TC_H_ROOT Class Creation Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21971 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_backlog() uses TC_H_ROOT as a termination condition when traversing up the qdisc tree to update parent backlog counters. However, if a class is created with classid TC_H_ROOT, the traversal terminates prematurely at this class instead of reaching the actual root qdisc, causing parent statistics to be incorrectly maintained. In case of DRR, this could lead to a crash as reported by Mingi Cho. Prevent the creation of any Qdisc class with classid TC_H_ROOT (0xFFFFFFFF) across all qdisc types, as suggested by Jamal. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21971"> read more </a> </article> <hr> <article> <h3> CVE-2025-21972 - Linux Kernel MCTP Net Fragment Reassembly Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21972 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the frag_list used for reassembly isn't shared with other packets. This avoids incorrect reassembly when packets are cloned, and prevents a memory leak due to circular references between fragments and their skb_shared_info. The upcoming MCTP-over-USB driver uses skb_clone which can trigger the problem - other MCTP drivers don't share SKBs. A kunit test is added to reproduce the issue. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21972"> read more </a> </article> <hr> <article> <h3> CVE-2025-21973 - Here is the title:ASUS PRIME Z690-P D4 bnxt_en NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21973 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} When qstats-get operation is executed, callbacks of netdev_stats_ops are called. The bnxt_get_queue_stats{rx | tx} collect per-queue stats from sw_stats in the rings. But {rx | tx | cp}_ring are allocated when the interface is up. So, these rings are not allocated when the interface is down. The qstats-get is allowed even if the interface is down. However, the bnxt_get_queue_stats{rx | tx}() accesses cp_ring and tx_ring without null check. So, it needs to avoid accessing rings if the interface is down. Reproducer: ip link set $interface down ./cli.py --spec netdev.yaml --dump qstats-get OR ip link set $interface down python ./stats.py Splat looks like: BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 1680fa067 P4D 1680fa067 PUD 16be3b067 PMD 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 UID: 0 PID: 1495 Comm: python3 Not tainted 6.14.0-rc4+ #32 5cd0f999d5a15c574ac72b3e4b907341 Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_get_queue_stats_rx+0xf/0x70 [bnxt_en] Code: c6 87 b5 18 00 00 02 eb a2 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 01 RSP: 0018:ffffabef43cdb7e0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffffffffc04c8710 RCX: 0000000000000000 RDX: ffffabef43cdb858 RSI: 0000000000000000 RDI: ffff8d504e850000 RBP: ffff8d506c9f9c00 R08: 0000000000000004 R09: ffff8d506bcd901c R10: 0000000000000015 R11: ffff8d506bcd9000 R12: 0000000000000000 R13: ffffabef43cdb8c0 R14: ffff8d504e850000 R15: 0000000000000000 FS: 00007f2c5462b080(0000) GS:ffff8d575f600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000167fd0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x15a/0x460 ? sched_balance_find_src_group+0x58d/0xd10 ? exc_page_fault+0x6e/0x180 ? asm_exc_page_fault+0x22/0x30 ? bnxt_get_queue_stats_rx+0xf/0x70 [bnxt_en cdd546fd48563c280cfd30e9647efa420db07bf1] netdev_nl_stats_by_netdev+0x2b1/0x4e0 ? xas_load+0x9/0xb0 ? xas_find+0x183/0x1d0 ? xa_find+0x8b/0xe0 netdev_nl_qstats_get_dumpit+0xbf/0x1e0 genl_dumpit+0x31/0x90 netlink_dump+0x1a8/0x360 <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21973"> read more </a> </article> <hr> <article> <h3> CVE-2025-21974 - ASUS PRIME Z690-P D4 bnxt_en Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21974 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() The bnxt_queue_mem_alloc() is called to allocate new queue memory when a queue is restarted. It internally accesses rx buffer descriptor corresponding to the index. The rx buffer descriptor is allocated and set when the interface is up and it's freed when the interface is down. So, if queue is restarted if interface is down, kernel panic occurs. Splat looks like: BUG: unable to handle page fault for address: 000000000000b240 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 UID: 0 PID: 1563 Comm: ncdevmem2 Not tainted 6.14.0-rc2+ #9 844ddba6e7c459cafd0bf4db9a3198e Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_queue_mem_alloc+0x3f/0x4e0 [bnxt_en] Code: 41 54 4d 89 c4 4d 69 c0 c0 05 00 00 55 48 89 f5 53 48 89 fb 4c 8d b5 40 05 00 00 48 83 ec 15 RSP: 0018:ffff9dcc83fef9e8 EFLAGS: 00010202 RAX: ffffffffc0457720 RBX: ffff934ed8d40000 RCX: 0000000000000000 RDX: 000000000000001f RSI: ffff934ea508f800 RDI: ffff934ea508f808 RBP: ffff934ea508f800 R08: 000000000000b240 R09: ffff934e84f4b000 R10: ffff9dcc83fefa30 R11: ffff934e84f4b000 R12: 000000000000001f R13: ffff934ed8d40ac0 R14: ffff934ea508fd40 R15: ffff934e84f4b000 FS: 00007fa73888c740(0000) GS:ffff93559f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000b240 CR3: 0000000145a2e000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x15a/0x460 ? exc_page_fault+0x6e/0x180 ? asm_exc_page_fault+0x22/0x30 ? __pfx_bnxt_queue_mem_alloc+0x10/0x10 [bnxt_en 7f85e76f4d724ba07471d7e39d9e773aea6597b7] ? bnxt_queue_mem_alloc+0x3f/0x4e0 [bnxt_en 7f85e76f4d724ba07471d7e39d9e773aea6597b7] netdev_rx_queue_restart+0xc5/0x240 net_devmem_bind_dmabuf_to_queue+0xf8/0x200 netdev_nl_bind_rx_doit+0x3a7/0x450 genl_family_rcv_msg_doit+0xd9/0x130 genl_rcv_msg+0x184/0x2b0 ? __pfx_netdev_nl_bind_rx_doit+0x10/0x10 ? __pfx_genl_rcv_msg+0x10/0x10 netlink_rcv_skb+0x54/0x100 genl_rcv+0x24/0x40 ... <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21974"> read more </a> </article> <hr> <article> <h3> CVE-2025-21975 - "mlx5 Linux Kernel Null Pointer Dereference Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21975 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() must be checked to prevent NULL pointer dereferences. If either function fails, the function should log error message with mlx5_core_warn() and return error pointer. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21975"> read more </a> </article> <hr> <article> <h3> CVE-2025-21976 - Linux Kernel Hyper-V framebuffer Unbind Information Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-21976 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: fbdev: hyperv_fb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbind, hyperv_fb driver tries to release the framebuffer forcefully. If this framebuffer is in use it produce the following WARN and hence this framebuffer is never released. [ 44.111220] WARNING: CPU: 35 PID: 1882 at drivers/video/fbdev/core/fb_info.c:70 framebuffer_release+0x2c/0x40 < snip > [ 44.111289] Call Trace: [ 44.111290] <TASK> [ 44.111291] ? show_regs+0x6c/0x80 [ 44.111295] ? __warn+0x8d/0x150 [ 44.111298] ? framebuffer_release+0x2c/0x40 [ 44.111300] ? report_bug+0x182/0x1b0 [ 44.111303] ? handle_bug+0x6e/0xb0 [ 44.111306] ? exc_invalid_op+0x18/0x80 [ 44.111308] ? asm_exc_invalid_op+0x1b/0x20 [ 44.111311] ? framebuffer_release+0x2c/0x40 [ 44.111313] ? hvfb_remove+0x86/0xa0 [hyperv_fb] [ 44.111315] vmbus_remove+0x24/0x40 [hv_vmbus] [ 44.111323] device_remove+0x40/0x80 [ 44.111325] device_release_driver_internal+0x20b/0x270 [ 44.111327] ? bus_find_device+0xb3/0xf0 Fix this by moving the release of framebuffer and assosiated memory to fb_ops.fb_destroy function, so that framebuffer framework handles it gracefully. While we fix this, also replace manual registrations/unregistration of framebuffer with devm_register_framebuffer. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21976"> read more </a> </article> <hr> <article> <h3> CVE-2025-21977 - Linux Hyper-V Framebuffer Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21977 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Gen 2 Hyper-V VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the efifb driver may hang because of accessing the framebuffer at the wrong memory address. The scenario occurs when the hyperv_fb driver in the original kernel moves the framebuffer to a different MMIO address because of conflicts with an already-running efifb or simplefb driver. The hyperv_fb driver then informs Hyper-V of the change, which is allowed by the Hyper-V FB VMBus device protocol. However, when the kexec command loads the kdump kernel into crash memory via the kexec_file_load() system call, the system call doesn't know the framebuffer has moved, and it sets up the kdump screen_info using the original framebuffer address. The transition to the kdump kernel does not go through the Hyper-V host, so Hyper-V does not reset the framebuffer address like it would do on a reboot. When efifb tries to run, it accesses a non-existent framebuffer address, which traps to the Hyper-V host. After many such accesses, the Hyper-V host thinks the guest is being malicious, and throttles the guest to the point that it runs very slowly or appears to have hung. When the kdump kernel is loaded into crash memory via the kexec_load() system call, the problem does not occur. In this case, the kexec command builds the screen_info table itself in user space from data returned by the FBIOGET_FSCREENINFO ioctl against /dev/fb0, which gives it the new framebuffer location. This problem was originally reported in 2020 [1], resulting in commit 3cb73bc3fa2a ("hyperv_fb: Update screen_info after removing old framebuffer"). This commit solved the problem by setting orig_video_isVGA to 0, so the kdump kernel was unaware of the EFI framebuffer. The efifb driver did not try to load, and no hang occurred. But in 2024, commit c25a19afb81c ("fbdev/hyperv_fb: Do not clear global screen_info") effectively reverted 3cb73bc3fa2a. Commit c25a19afb81c has no reference to 3cb73bc3fa2a, so perhaps it was done without knowing the implications that were reported with 3cb73bc3fa2a. In any case, as of commit c25a19afb81c, the original problem came back again. Interestingly, the hyperv_drm driver does not have this problem because it never moves the framebuffer. The difference is that the hyperv_drm driver removes any conflicting framebuffers *before* allocating an MMIO address, while the hyperv_fb drivers removes conflicting framebuffers *after* allocating an MMIO address. With the "after" ordering, hyperv_fb may encounter a conflict and move the framebuffer to a different MMIO address. But the conflict is essentially bogus because it is removed a few lines of code later. Rather than fix the problem with the approach from 2020 in commit 3cb73bc3fa2a, instead slightly reorder the steps in hyperv_fb so conflicting framebuffers are removed before allocating an MMIO address. Then the default framebuffer MMIO address should always be available, and there's never any confusion about which framebuffer address the kdump kernel should use -- it's always the original address provided by the Hyper-V host. This approach is already used by the hyperv_drm driver, and is consistent with the usage guidelines at the head of the module with the function aperture_remove_conflicting_devices(). This approach also solves a related minor problem when kexec_load() is used to load the kdump kernel. With current code, unbinding and rebinding the hyperv_fb driver could result in the framebuffer moving back to the default framebuffer address, because on the rebind there are no conflicts. If such a move is done after the kdump kernel is loaded with the new framebuffer address, at kdump time it could again have the wrong address. This problem and fix are described in terms of the kdump kernel, but it can also occur ---truncated--- <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21977"> read more </a> </article> <hr> <article> <h3> CVE-2025-21978 - Hyper-V DRM Address Space Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-21978 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked. Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21978"> read more </a> </article> <hr> <article> <h3> CVE-2025-21979 - "Linux Kernel WiFi cfg80211 Use-After-Free Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21979 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the rdev::wiphy_work is getting queued. If wiphy_free is called before the rdev::wiphy_work had a chance to run, the wiphy memory will be freed, and then when it eventally gets to run it'll use invalid memory. Fix this by canceling the work before freeing the wiphy. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21979"> read more </a> </article> <hr> <article> <h3> CVE-2025-21980 - Linux Kernel Sched NULL Pointer Dereference Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21980 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload(). <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21980"> read more </a> </article> <hr> <article> <h3> CVE-2025-21981 - "Ice: Memory Leak in aRFS after Reset" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21981 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases: - as part of VSI initialization (at probe), and - as part of reset handling However, VSI reconfiguration executed during reset involves memory allocation one more time, without prior releasing already allocated resources. This led to the memory leak with the following signature: [root@os-delivery ~]# cat /sys/kernel/debug/kmemleak unreferenced object 0xff3c1ca7252e6000 (size 8192): comm "kworker/0:0", pid 8, jiffies 4296833052 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): [<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340 [<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice] [<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice] [<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice] [<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice] [<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice] [<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0 [<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20 [<ffffffff98f0b6d9>] process_one_work+0x179/0x390 [<ffffffff98f0c1e9>] worker_thread+0x239/0x340 [<ffffffff98f14abc>] kthread+0xcc/0x100 [<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50 [<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30 ... <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21981"> read more </a> </article> <hr> <article> <h3> CVE-2025-21982 - "NuvoTon Npcm8xx Linux Kernel Null Pointer Dereference" </h3> <p> <strong>CVE ID : </strong>CVE-2025-21982 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21982"> read more </a> </article> <hr> <article> <h3> CVE-2025-21983 - Linux Kernel - NVMe WQ_MEM_RECLAIM Workqueue Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21983 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq Currently kvfree_rcu() APIs use a system workqueue which is "system_unbound_wq" to driver RCU machinery to reclaim a memory. Recently, it has been noted that the following kernel warning can be observed: <snip> workqueue: WQ_MEM_RECLAIM nvme-wq:nvme_scan_work is flushing !WQ_MEM_RECLAIM events_unbound:kfree_rcu_work WARNING: CPU: 21 PID: 330 at kernel/workqueue.c:3719 check_flush_dependency+0x112/0x120 Modules linked in: intel_uncore_frequency(E) intel_uncore_frequency_common(E) skx_edac(E) ... CPU: 21 UID: 0 PID: 330 Comm: kworker/u144:6 Tainted: G E 6.13.2-0_g925d379822da #1 Hardware name: Wiwynn Twin Lakes MP/Twin Lakes Passive MP, BIOS YMM20 02/01/2023 Workqueue: nvme-wq nvme_scan_work RIP: 0010:check_flush_dependency+0x112/0x120 Code: 05 9a 40 14 02 01 48 81 c6 c0 00 00 00 48 8b 50 18 48 81 c7 c0 00 00 00 48 89 f9 48 ... RSP: 0018:ffffc90000df7bd8 EFLAGS: 00010082 RAX: 000000000000006a RBX: ffffffff81622390 RCX: 0000000000000027 RDX: 00000000fffeffff RSI: 000000000057ffa8 RDI: ffff88907f960c88 RBP: 0000000000000000 R08: ffffffff83068e50 R09: 000000000002fffd R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881001a4400 R13: 0000000000000000 R14: ffff88907f420fb8 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88907f940000(0000) knlGS:0000000000000000 CR2: 00007f60c3001000 CR3: 000000107d010005 CR4: 00000000007726f0 PKRU: 55555554 Call Trace: <TASK> ? __warn+0xa4/0x140 ? check_flush_dependency+0x112/0x120 ? report_bug+0xe1/0x140 ? check_flush_dependency+0x112/0x120 ? handle_bug+0x5e/0x90 ? exc_invalid_op+0x16/0x40 ? asm_exc_invalid_op+0x16/0x20 ? timer_recalc_next_expiry+0x190/0x190 ? check_flush_dependency+0x112/0x120 ? check_flush_dependency+0x112/0x120 __flush_work.llvm.1643880146586177030+0x174/0x2c0 flush_rcu_work+0x28/0x30 kvfree_rcu_barrier+0x12f/0x160 kmem_cache_destroy+0x18/0x120 bioset_exit+0x10c/0x150 disk_release.llvm.6740012984264378178+0x61/0xd0 device_release+0x4f/0x90 kobject_put+0x95/0x180 nvme_put_ns+0x23/0xc0 nvme_remove_invalid_namespaces+0xb3/0xd0 nvme_scan_work+0x342/0x490 process_scheduled_works+0x1a2/0x370 worker_thread+0x2ff/0x390 ? pwq_release_workfn+0x1e0/0x1e0 kthread+0xb1/0xe0 ? __kthread_parkme+0x70/0x70 ret_from_fork+0x30/0x40 ? __kthread_parkme+0x70/0x70 ret_from_fork_asm+0x11/0x20 </TASK> ---[ end trace 0000000000000000 ]--- <snip> To address this switch to use of independent WQ_MEM_RECLAIM workqueue, so the rules are not violated from workqueue framework point of view. Apart of that, since kvfree_rcu() does reclaim memory it is worth to go with WQ_MEM_RECLAIM type of wq because it is designed for this purpose. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21983"> read more </a> </article> <hr> <article> <h3> CVE-2025-21984 - Linux Kernel mm Swapcache Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21984 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfd_move encounters swapcache userfaultfd_move() checks whether the PTE entry is present or a swap entry. - If the PTE entry is present, move_present_pte() handles folio migration by setting: src_folio->index = linear_page_index(dst_vma, dst_addr); - If the PTE entry is a swap entry, move_swap_pte() simply copies the PTE to the new dst_addr. This approach is incorrect because, even if the PTE is a swap entry, it can still reference a folio that remains in the swap cache. This creates a race window between steps 2 and 4. 1. add_to_swap: The folio is added to the swapcache. 2. try_to_unmap: PTEs are converted to swap entries. 3. pageout: The folio is written back. 4. Swapcache is cleared. If userfaultfd_move() occurs in the window between steps 2 and 4, after the swap PTE has been moved to the destination, accessing the destination triggers do_swap_page(), which may locate the folio in the swapcache. However, since the folio's index has not been updated to match the destination VMA, do_swap_page() will detect a mismatch. This can result in two critical issues depending on the system configuration. If KSM is disabled, both small and large folios can trigger a BUG during the add_rmap operation due to: page_pgoff(folio, page) != linear_page_index(vma, address) [ 13.336953] page: refcount:6 mapcount:1 mapping:00000000f43db19c index:0xffffaf150 pfn:0x4667c [ 13.337520] head: order:2 mapcount:1 entire_mapcount:0 nr_pages_mapped:1 pincount:0 [ 13.337716] memcg:ffff00000405f000 [ 13.337849] anon flags: 0x3fffc0000020459(locked|uptodate|dirty|owner_priv_1|head|swapbacked|node=0|zone=0|lastcpupid=0xffff) [ 13.338630] raw: 03fffc0000020459 ffff80008507b538 ffff80008507b538 ffff000006260361 [ 13.338831] raw: 0000000ffffaf150 0000000000004000 0000000600000000 ffff00000405f000 [ 13.339031] head: 03fffc0000020459 ffff80008507b538 ffff80008507b538 ffff000006260361 [ 13.339204] head: 0000000ffffaf150 0000000000004000 0000000600000000 ffff00000405f000 [ 13.339375] head: 03fffc0000000202 fffffdffc0199f01 ffffffff00000000 0000000000000001 [ 13.339546] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 13.339736] page dumped because: VM_BUG_ON_PAGE(page_pgoff(folio, page) != linear_page_index(vma, address)) [ 13.340190] ------------[ cut here ]------------ [ 13.340316] kernel BUG at mm/rmap.c:1380! [ 13.340683] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 13.340969] Modules linked in: [ 13.341257] CPU: 1 UID: 0 PID: 107 Comm: a.out Not tainted 6.14.0-rc3-gcf42737e247a-dirty #299 [ 13.341470] Hardware name: linux,dummy-virt (DT) [ 13.341671] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 13.341815] pc : __page_check_anon_rmap+0xa0/0xb0 [ 13.341920] lr : __page_check_anon_rmap+0xa0/0xb0 [ 13.342018] sp : ffff80008752bb20 [ 13.342093] x29: ffff80008752bb20 x28: fffffdffc0199f00 x27: 0000000000000001 [ 13.342404] x26: 0000000000000000 x25: 0000000000000001 x24: 0000000000000001 [ 13.342575] x23: 0000ffffaf0d0000 x22: 0000ffffaf0d0000 x21: fffffdffc0199f00 [ 13.342731] x20: fffffdffc0199f00 x19: ffff000006210700 x18: 00000000ffffffff [ 13.342881] x17: 6c203d2120296567 x16: 6170202c6f696c6f x15: 662866666f67705f [ 13.343033] x14: 6567617028454741 x13: 2929737365726464 x12: ffff800083728ab0 [ 13.343183] x11: ffff800082996bf8 x10: 0000000000000fd7 x9 : ffff80008011bc40 [ 13.343351] x8 : 0000000000017fe8 x7 : 00000000fffff000 x6 : ffff8000829eebf8 [ 13.343498] x5 : c0000000fffff000 x4 : 0000000000000000 x3 : 0000000000000000 [ 13.343645] x2 : 0000000000000000 x1 : ffff0000062db980 x0 : 000000000000005f [ 13.343876] Call trace: [ 13.344045] __page_check_anon_rmap+0xa0/0xb0 (P) [ 13.344234] folio_add_anon_rmap_ptes+0x22c/0x320 [ 13.344333] do_swap_page+0x1060/0x1400 [ 13.344417] __handl ---truncated--- <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21984"> read more </a> </article> <hr> <article> <h3> CVE-2025-21985 - AMD Display Out-of-Bounds Array Index Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21985 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS. Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21985"> read more </a> </article> <hr> <article> <h3> CVE-2025-21986 - Linux Kernel: Switchdev Notification Chain Locking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-21986 <strong>Published : </strong> April 1, 2025, 4:15 p.m. | 1 hour, 36 minutes ago <strong>Description : </strong>In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for writing when adding / removing notifiers to / from the chain and acquired for reading when traversing the chain and informing notifiers about an event. In case of the blocking switchdev notification chain, recursive notifications are possible which leads to the semaphore being acquired twice for reading and to lockdep warnings being generated [1]. Specifically, this can happen when the bridge driver processes a SWITCHDEV_BRPORT_UNOFFLOADED event which causes it to emit notifications about deferred events when calling switchdev_deferred_process(). Fix this by converting the notification chain to a raw notification chain in a similar fashion to the netdev notification chain. Protect the chain using the RTNL mutex by acquiring it when modifying the chain. Events are always informed under the RTNL mutex, but add an assertion in call_switchdev_blocking_notifiers() to make sure this is not violated in the future. Maintain the "blocking" prefix as events are always emitted from process context and listeners are allowed to block. [1]: WARNING: possible recursive locking detected 6.14.0-rc4-custom-g079270089484 #1 Not tainted -------------------------------------------- ip/52731 is trying to acquire lock: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0 but task is already holding lock: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((switchdev_blocking_notif_chain).rwsem); lock((switchdev_blocking_notif_chain).rwsem); *** DEADLOCK *** May be due to missing lock nesting notation 3 locks held by ip/52731: #0: ffffffff84f795b0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x727/0x1dc0 #1: ffffffff8731f628 (&net->rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x790/0x1dc0 #2: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0 stack backtrace: ... ? __pfx_down_read+0x10/0x10 ? __pfx_mark_lock+0x10/0x10 ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 blocking_notifier_call_chain+0x58/0xa0 switchdev_port_attr_notify.constprop.0+0xb3/0x1b0 ? __pfx_switchdev_port_attr_notify.constprop.0+0x10/0x10 ? mark_held_locks+0x94/0xe0 ? switchdev_deferred_process+0x11a/0x340 switchdev_port_attr_set_deferred+0x27/0xd0 switchdev_deferred_process+0x164/0x340 br_switchdev_port_unoffload+0xc8/0x100 [bridge] br_switchdev_blocking_event+0x29f/0x580 [bridge] notifier_call_chain+0xa2/0x440 blocking_notifier_call_chain+0x6e/0xa0 switchdev_bridge_port_unoffload+0xde/0x1a0 ... <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 16:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21986"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr, le Campus cyber Nouvelle Aquitaine et Cyber’Occ annoncent la signature drsquo;une convention pour intégrer lrsquo;offre de service drsquo;assistance des CSIRT territoriaux néo-aquitain et d’Occitanie dans le 17Cyber, guichet unique face à la cybermalveillance </h3> <p>Alors que 17Cyber a été lancé en décembre dernier, le guichet unique d’assistance conçu par Cybermalveillance.gouv.fr, la Police nationale et la Gendarmerie nationale étend ses collaborations avec des acteurs de l’écosystème tels que les CSIRT (centres de réponse à incident)…</p> <p class="feed-time"> Tue, 01 Apr 2025 15:28:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/csirt-territoriaux-17cyber"> read more </a> </article> <hr> <article> <h3> CVE-2025-1658 - Autodesk Navisworks Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1658 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. <strong>Severity:</strong> 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1658"> read more </a> </article> <hr> <article> <h3> CVE-2025-1659 - Autodesk Navisworks Out-of-Bounds Read Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1659 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. <strong>Severity:</strong> 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1659"> read more </a> </article> <hr> <article> <h3> CVE-2025-1660 - Autodesk Navisworks Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1660 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. <strong>Severity:</strong> 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1660"> read more </a> </article> <hr> <article> <h3> CVE-2025-22231 - VMware Aria Operations Local Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-22231 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations. <strong>Severity:</strong> 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-22231"> read more </a> </article> <hr> <article> <h3> CVE-2025-31408 - Zoho Flow Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31408 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Zoho Flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through 2.13.3. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31408"> read more </a> </article> <hr> <article> <h3> CVE-2025-3028 - Mozilla Firefox JavaScript XSLTProcessor Use-After-Free Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3028 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability affects Firefox < 137, Firefox ESR < 115.22, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird ESR < 128.9. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3028"> read more </a> </article> <hr> <article> <h3> CVE-2025-3029 - Mozilla Firefox/Thunderbird URL Spoofing Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3029 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird ESR < 128.9. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3029"> read more </a> </article> <hr> <article> <h3> CVE-2025-3030 - Mozilla Firefox Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3030 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird ESR < 128.9. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3030"> read more </a> </article> <hr> <article> <h3> CVE-2025-3031 - Mozilla Firefox Stack Information Leak Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3031 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3031"> read more </a> </article> <hr> <article> <h3> CVE-2025-3032 - Firefox File Descriptor Leak Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-3032 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox < 137 and Thunderbird < 137. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3032"> read more </a> </article> <hr> <article> <h3> CVE-2025-3033 - Firefox Windows URL Shortcut Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3033 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3033"> read more </a> </article> <hr> <article> <h3> CVE-2025-3034 - Mozilla Firefox Memory Corruption Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3034 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137 and Thunderbird < 137. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3034"> read more </a> </article> <hr> <article> <h3> CVE-2025-3035 - Firefox Document Title Leaking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3035 <strong>Published : </strong> April 1, 2025, 1:15 p.m. | 34 minutes ago <strong>Description : </strong>By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox < 137. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3035"> read more </a> </article> <hr> <article> <h3> CVE-2024-13553 - WooCommerce WordPress Host Header Spoofing Privilege Escalation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-13553 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a playground environment. This makes it possible for unauthenticated attackers to spoof the Host header to make the OTP code "1234" and authenticate as any user, including administrators. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-13553"> read more </a> </article> <hr> <article> <h3> CVE-2025-2237 - Homeo Theme for WordPress Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-2237 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to authentication bypass in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'process_register' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2237"> read more </a> </article> <hr> <article> <h3> CVE-2025-2906 - Contempo Real Estate Core WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2906 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <strong>Severity:</strong> 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2906"> read more </a> </article> <hr> <article> <h3> CVE-2025-30177 - Apache Camel Undertow: Camel Message Header Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-30177 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6. Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS. Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the "out" direction, while it doesn't filter the "in" direction. This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30177"> read more </a> </article> <hr> <article> <h3> CVE-2025-3083 - MongoDB Mongos Protocol Crash Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3083 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16 <strong>Severity:</strong> 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3083"> read more </a> </article> <hr> <article> <h3> CVE-2025-3084 - MongoDB Server Argument Validation Buffer Crash </h3> <p> <strong>CVE ID : </strong>CVE-2025-3084 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4 <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3084"> read more </a> </article> <hr> <article> <h3> CVE-2025-3085 - MongoDB TLS Intermediate Certificate Revocation Status Checking Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3085 <strong>Published : </strong> April 1, 2025, 12:15 p.m. | 1 hour, 34 minutes ago <strong>Description : </strong>A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects MongoDB Server v5.0 versions prior to 5.0.31, MongoDB Server v6.0 versions prior to 6.0.20, MongoDB Server v7.0 versions prior to 7.0.16 and MongoDB Server v8.0 versions prior to 8.0.4. Required Configuration : MongoDB Server must be running on Linux Operating Systems and CRL revocation status checking must be enabled <strong>Severity:</strong> 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 12:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3085"> read more </a> </article> <hr> <article> <h3> CVE-2025-3082 - MongoDB Server Collation Manipulation Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3082 <strong>Published : </strong> April 1, 2025, 11:15 a.m. | 2 hours, 34 minutes ago <strong>Description : </strong>A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4. <strong>Severity:</strong> 3.1 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3082"> read more </a> </article> <hr> <article> <h3> CVE-2024-56325 - Apache Pinot Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2024-56325 <strong>Published : </strong> April 1, 2025, 9:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"} http://{server_ip}:9000/users Return: {"code":401,"error":"HTTP 401 Unauthorized"} Malicious Request and Response Example curl -X POST -H "Content-Type: application/json" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}' http://{serverip}:9000/users; http://{serverip}:9000/users; . Return: {"users":{}} A new user gets added bypassing authentication, enabling the user to control Pinot. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-56325"> read more </a> </article> <hr> <article> <h3> CVE-2025-27130 - Welcart e-Commerce Deserialization Remote Code Execution </h3> <p> <strong>CVE ID : </strong>CVE-2025-27130 <strong>Published : </strong> April 1, 2025, 9:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27130"> read more </a> </article> <hr> <article> <h3> CVE-2025-2891 - "Real Estate 7 WordPress Theme Arbitrary File Upload Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2891 <strong>Published : </strong> April 1, 2025, 8:15 a.m. | 5 hours, 34 minutes ago <strong>Description : </strong>The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible if front-end listing submission has been enabled. <strong>Severity:</strong> 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2891"> read more </a> </article> <hr> <article> <h3> CVE-2025-30065 - Apache Parquet Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30065 <strong>Published : </strong> April 1, 2025, 8:15 a.m. | 5 hours, 34 minutes ago <strong>Description : </strong>Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30065"> read more </a> </article> <hr> <article> <h3> CVE-2025-27427 - Apache ActiveMQ Artemis Routing Type Permission Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-27427 <strong>Published : </strong> April 1, 2025, 8:15 a.m. | 3 hours, 34 minutes ago <strong>Description : </strong>A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address. This issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0. Users are recommended to upgrade to version 2.40.0 which fixes the issue. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-27427"> read more </a> </article> <hr> <article> <h3> CVE-2025-29868 - Apache Answer IP Address Disclosure </h3> <p> <strong>CVE ID : </strong>CVE-2025-29868 <strong>Published : </strong> April 1, 2025, 8:15 a.m. | 3 hours, 34 minutes ago <strong>Description : </strong>Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user. Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-29868"> read more </a> </article> <hr> <article> <h3> CVE-2024-12189 - WDesignKit WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12189 <strong>Published : </strong> April 1, 2025, 7:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <strong>Severity:</strong> 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12189"> read more </a> </article> <hr> <article> <h3> CVE-2024-12278 - Booster for WooCommerce Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2024-12278 <strong>Published : </strong> April 1, 2025, 7:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <strong>Severity:</strong> 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2024-12278"> read more </a> </article> <hr> <article> <h3> CVE-2025-1267 - Groundhogg for WordPress Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1267 <strong>Published : </strong> April 1, 2025, 7:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>The Groundhogg plugin for Wordpress is vulnerable to Stored Cross-Site Scripting via the ‘label' parameter in versions up to, and including, 3.7.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. <strong>Severity:</strong> 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1267"> read more </a> </article> <hr> <article> <h3> CVE-2025-1512 - Elementor PowerPack Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-1512 <strong>Published : </strong> April 1, 2025, 7:15 a.m. | 4 hours, 34 minutes ago <strong>Description : </strong>The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Cursor Extension in all versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. <strong>Severity:</strong> 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-1512"> read more </a> </article> <hr> <article> <h3> CVE-2025-30910 - CreativeMindsSolutions CM Download Manager Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30910 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CreativeMindsSolutions CM Download Manager allows Path Traversal. This issue affects CM Download Manager: from n/a through 2.9.6. <strong>Severity:</strong> 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30910"> read more </a> </article> <hr> <article> <h3> CVE-2025-30911 - Rometheme RomethemeKit For Elementor Command Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30911 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RomethemeKit For Elementor allows Command Injection. This issue affects RomethemeKit For Elementor: from n/a through 1.5.4. <strong>Severity:</strong> 9.9 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30911"> read more </a> </article> <hr> <article> <h3> CVE-2025-30917 - WooCommerce SKU Generator Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30917 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham SKU Generator for WooCommerce allows Reflected XSS. This issue affects SKU Generator for WooCommerce: from n/a through 1.6.2. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30917"> read more </a> </article> <hr> <article> <h3> CVE-2025-30924 - Primer MyData for Woocommerce Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-30924 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in primersoftware Primer MyData for Woocommerce allows Reflected XSS. This issue affects Primer MyData for Woocommerce: from n/a through n/a. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30924"> read more </a> </article> <hr> <article> <h3> CVE-2025-30926 - KingAddons.com King Addons for Elementor Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30926 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in KingAddons.com King Addons for Elementor. This issue affects King Addons for Elementor: from n/a through 24.12.58. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30926"> read more </a> </article> <hr> <article> <h3> CVE-2025-30971 - Xavi Ivars XV Random Quotes SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30971 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xavi Ivars XV Random Quotes allows SQL Injection. This issue affects XV Random Quotes: from n/a through 1.40. <strong>Severity:</strong> 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30971"> read more </a> </article> <hr> <article> <h3> CVE-2025-31001 - TLA Media GTM Kit Debug Information Leak </h3> <p> <strong>CVE ID : </strong>CVE-2025-31001 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit allows Retrieve Embedded Sensitive Data. This issue affects GTM Kit: from n/a through 2.3.1. <strong>Severity:</strong> 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31001"> read more </a> </article> <hr> <article> <h3> CVE-2025-31024 - RJ Quickcharts SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-31024 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in randyjensen RJ Quickcharts allows SQL Injection. This issue affects RJ Quickcharts: from n/a through 0.6.1. <strong>Severity:</strong> 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31024"> read more </a> </article> <hr> <article> <h3> CVE-2025-31074 - MDJM Event Management Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31074 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in MDJM MDJM Event Management allows Object Injection. This issue affects MDJM Event Management: from n/a through 1.7.5.2. <strong>Severity:</strong> 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31074"> read more </a> </article> <hr> <article> <h3> CVE-2025-31084 - Sunshine Photo Cart Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31084 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart allows Object Injection. This issue affects Sunshine Photo Cart: from n/a through 3.4.10. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31084"> read more </a> </article> <hr> <article> <h3> CVE-2025-31087 - Silverplugins217 Woocommerce Object Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31087 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Deserialization of Untrusted Data vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce allows Object Injection. This issue affects Multiple Shipping And Billing Address For Woocommerce: from n/a through 1.5. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31087"> read more </a> </article> <hr> <article> <h3> CVE-2025-31095 - Ho3einie Material Dashboard Authentication Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-31095 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Authentication Bypass Using an Alternate Path or Channel vulnerability in ho3einie Material Dashboard allows Authentication Bypass. This issue affects Material Dashboard: from n/a through 1.4.5. <strong>Severity:</strong> 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31095"> read more </a> </article> <hr> <article> <h3> CVE-2025-31409 - NotFound Bridge Core Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31409 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31409"> read more </a> </article> <hr> <article> <h3> CVE-2025-31415 - YayCommerce YayExtra Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31415 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 5 hours, 33 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in YayCommerce YayExtra allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YayExtra: from n/a through 1.5.2. <strong>Severity:</strong> 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31415"> read more </a> </article> <hr> <article> <h3> CVE-2025-30848 - Bob Hostel Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30848 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel allows Reflected XSS. This issue affects Hostel: from n/a through 1.1.5. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30848"> read more </a> </article> <hr> <article> <h3> CVE-2025-30849 - "G5theme Essential Real Estate PHP Remote File Inclusion Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-30849 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Essential Real Estate allows PHP Local File Inclusion. This issue affects Essential Real Estate: from n/a through 5.2.0. <strong>Severity:</strong> 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30849"> read more </a> </article> <hr> <article> <h3> CVE-2025-30869 - Parakoos Image Wall Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-30869 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Parakoos Image Wall allows Reflected XSS. This issue affects Image Wall: from n/a through 3.0. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30869"> read more </a> </article> <hr> <article> <h3> CVE-2025-30870 - WP Travel Engine PHP Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30870 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.3.5. <strong>Severity:</strong> 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30870"> read more </a> </article> <hr> <article> <h3> CVE-2025-30876 - WPQuads SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-30876 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ads by WPQuads Ads by WPQuads allows SQL Injection. This issue affects Ads by WPQuads: from n/a through 2.0.87.1. <strong>Severity:</strong> 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30876"> read more </a> </article> <hr> <article> <h3> CVE-2025-30878 - JoomSky JS Help Desk Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30878 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk allows Path Traversal. This issue affects JS Help Desk: from n/a through 2.9.2. <strong>Severity:</strong> 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30878"> read more </a> </article> <hr> <article> <h3> CVE-2025-30880 - JoomSky JS Help Desk Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30880 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in JoomSky JS Help Desk allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Help Desk: from n/a through 2.9.2. <strong>Severity:</strong> 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30880"> read more </a> </article> <hr> <article> <h3> CVE-2025-30882 - JoomSky JS Help Desk Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-30882 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk allows Path Traversal. This issue affects JS Help Desk: from n/a through 2.9.1. <strong>Severity:</strong> 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30882"> read more </a> </article> <hr> <article> <h3> CVE-2025-30886 - JoomSky JS Help Desk SQL Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-30886 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk allows SQL Injection. This issue affects JS Help Desk: from n/a through 2.9.2. <strong>Severity:</strong> 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30886"> read more </a> </article> <hr> <article> <h3> CVE-2025-30901 - JoomSky JS Help Desk PHP Remote File Inclusion </h3> <p> <strong>CVE ID : </strong>CVE-2025-30901 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk allows PHP Local File Inclusion. This issue affects JS Help Desk: from n/a through 2.9.2. <strong>Severity:</strong> 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30901"> read more </a> </article> <hr> <article> <h3> CVE-2025-30902 - ATL Software SRL AEC Kiosque Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-30902 <strong>Published : </strong> April 1, 2025, 6:15 a.m. | 48 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ATL Software SRL AEC Kiosque allows Reflected XSS. This issue affects AEC Kiosque: from n/a through 1.9.3. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 06:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30902"> read more </a> </article> <hr> <article> <h3> CVE-2025-30673 - Perl Sub::HandlesVia Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30673 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Sub::HandlesVia uses Mite to produce the affected code section due to CVE-2025-30672 <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30673"> read more </a> </article> <hr> <article> <h3> CVE-2025-31515 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-31515 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31515"> read more </a> </article> <hr> <article> <h3> CVE-2025-31516 - Apache OpenOffice Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-31516 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31516"> read more </a> </article> <hr> <article> <h3> CVE-2025-31517 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-31517 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31517"> read more </a> </article> <hr> <article> <h3> CVE-2025-31518 - Apache Web Server Cross-Site Request Forgery </h3> <p> <strong>CVE ID : </strong>CVE-2025-31518 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31518"> read more </a> </article> <hr> <article> <h3> CVE-2025-31519 - Citrix NetScaler Denial of Service </h3> <p> <strong>CVE ID : </strong>CVE-2025-31519 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31519"> read more </a> </article> <hr> <article> <h3> CVE-2025-31520 - VMware VMFS File System Directory Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-31520 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31520"> read more </a> </article> <hr> <article> <h3> CVE-2025-31521 - Apache HTTP Server Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31521 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31521"> read more </a> </article> <hr> <article> <h3> CVE-2025-31522 - Apache HTTP Server XML Entity Injection </h3> <p> <strong>CVE ID : </strong>CVE-2025-31522 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31522"> read more </a> </article> <hr> <article> <h3> CVE-2025-31523 - Apache HTTP Server Unvalidated User Input </h3> <p> <strong>CVE ID : </strong>CVE-2025-31523 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Rejected reason: Not used <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31523"> read more </a> </article> <hr> <article> <h3> CVE-2025-3051 - Linux::Statm::Tiny Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3051 <strong>Published : </strong> April 1, 2025, 3:15 a.m. | 1 hour, 2 minutes ago <strong>Description : </strong>Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672 <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 03:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3051"> read more </a> </article> <hr> <article> <h3> CVE-2025-30672 - Mite for Perl Arbitrary Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30672 <strong>Published : </strong> April 1, 2025, 2:15 a.m. | 2 hours, 2 minutes ago <strong>Description : </strong>Mite for Perl before 0.013000 generates code with the current working directory ('.') added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. This affects the Mite distribution itself, and other distributions that contain code generated by Mite. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 02:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30672"> read more </a> </article> <hr> <article> <h3> CVE-2025-21384 - Microsoft Azure Health Bot SSRF Privilege Escalation </h3> <p> <strong>CVE ID : </strong>CVE-2025-21384 <strong>Published : </strong> April 1, 2025, 1:15 a.m. | 3 hours, 2 minutes ago <strong>Description : </strong>An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. <strong>Severity:</strong> 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-21384"> read more </a> </article> <hr> <article> <h3> CVE-2025-3042 - Project Worlds Online Time Table Generator Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3042 <strong>Published : </strong> April 1, 2025, 1:15 a.m. | 3 hours, 2 minutes ago <strong>Description : </strong>A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3042"> read more </a> </article> <hr> <article> <h3> CVE-2025-3043 - GuoMinJim PersonManage Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3043 <strong>Published : </strong> April 1, 2025, 1:15 a.m. | 3 hours, 2 minutes ago <strong>Description : </strong>A vulnerability, which was classified as critical, has been found in GuoMinJim PersonManage 1.0. This issue affects the function preHandle of the file /login/. The manipulation of the argument Request leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3043"> read more </a> </article> <hr> <article> <h3> CVE-2025-3045 - "SourceCodester Apartment Visitor Management System SQL Injection" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3045 <strong>Published : </strong> April 1, 2025, 1:15 a.m. | 3 hours, 2 minutes ago <strong>Description : </strong>A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 01:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3045"> read more </a> </article> <hr> <article> <h3> CVE-2025-3041 - Project Worlds Online Time Table Generator Unrestricted File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3041 <strong>Published : </strong> April 1, 2025, 12:15 a.m. | 4 hours, 2 minutes ago <strong>Description : </strong>A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Tue, 01 Apr 2025 00:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3041"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Reporterre </h3> <p>nom, prénom, adresse courriel, adresse postale</p> <p class="feed-time"> Tue Apr 01 2025 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Reporterre-2025-04-01"> read more </a> </article> <hr> <article> <h3> CVE-2025-3037 - "yzk2356911358 StudentServlet-JSP Cross-Site Request Forgery (CSRF)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3037 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3037"> read more </a> </article> <hr> <article> <h3> CVE-2025-3038 - Code-projects Payroll Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3038 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3038"> read more </a> </article> <hr> <article> <h3> CVE-2025-3039 - Code-projects Payroll Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3039 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3039"> read more </a> </article> <hr> <article> <h3> CVE-2025-3040 - Project Worlds Online Time Table Generator File Upload Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3040 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3040"> read more </a> </article> <hr> <article> <h3> CVE-2025-3059 - Drupal Profile Private Unauthenticated File Upload </h3> <p> <strong>CVE ID : </strong>CVE-2025-3059 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>Vulnerability in Drupal Profile Private.This issue affects Profile Private: *.*. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3059"> read more </a> </article> <hr> <article> <h3> CVE-2025-3060 - Drupal Flattern Cross-Site Scripting (XSS) Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3060 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile: *.*. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3060"> read more </a> </article> <hr> <article> <h3> CVE-2025-3061 - "Drupal Material Admin Stored Cross-Site Scripting" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3061 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>Vulnerability in Drupal Material Admin.This issue affects Material Admin: *.*. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3061"> read more </a> </article> <hr> <article> <h3> CVE-2025-3062 - "Drupal Admin LTE Theme Cross-Site Scripting Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-3062 <strong>Published : </strong> March 31, 2025, 11:15 p.m. | 5 hours, 2 minutes ago <strong>Description : </strong>Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: *.*. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 23:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3062"> read more </a> </article> <hr> <article> <h3> CVE-2025-31600 - Designnbuy DesignO CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31600 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in designnbuy DesignO allows Cross Site Request Forgery. This issue affects DesignO: from n/a through 2.2.0. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31600"> read more </a> </article> <hr> <article> <h3> CVE-2025-31601 - Appointy Appointment Scheduler CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31601 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in appointy Appointy Appointment Scheduler allows Cross Site Request Forgery. This issue affects Appointy Appointment Scheduler: from n/a through 4.2.1. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31601"> read more </a> </article> <hr> <article> <h3> CVE-2025-31602 - Apimo Connector CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31602 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in apimofficiel Apimo Connector allows Cross Site Request Forgery. This issue affects Apimo Connector: from n/a through 2.6.3.1. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31602"> read more </a> </article> <hr> <article> <h3> CVE-2025-31603 - Moshensky CF7 Spreadsheets Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31603 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in moshensky CF7 Spreadsheets allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 Spreadsheets: from n/a through 2.3.2. <strong>Severity:</strong> 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31603"> read more </a> </article> <hr> <article> <h3> CVE-2025-31604 - Cal.com Stored XSS </h3> <p> <strong>CVE ID : </strong>CVE-2025-31604 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cal.com Cal.com allows Stored XSS. This issue affects Cal.com: from n/a through 1.0.0. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31604"> read more </a> </article> <hr> <article> <h3> CVE-2025-31605 - WeblineIndia Welcome Popup Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31605 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WeblineIndia Welcome Popup allows Stored XSS. This issue affects Welcome Popup: from n/a through 1.0.10. <strong>Severity:</strong> 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31605"> read more </a> </article> <hr> <article> <h3> CVE-2025-31606 - Softpulseinfotech SP Blog Designer Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31606 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in softpulseinfotech SP Blog Designer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SP Blog Designer: from n/a through 1.0.0. <strong>Severity:</strong> 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31606"> read more </a> </article> <hr> <article> <h3> CVE-2025-31607 - Flomei Simple-Audioplayer Stored Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31607 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flomei Simple-Audioplayer allows Stored XSS. This issue affects Simple-Audioplayer: from n/a through 1.1. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31607"> read more </a> </article> <hr> <article> <h3> CVE-2025-31608 - CookieHint WP Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31608 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reDim GmbH CookieHint WP allows Stored XSS. This issue affects CookieHint WP: from n/a through 1.0.0. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31608"> read more </a> </article> <hr> <article> <h3> CVE-2025-31609 - Arni Cinco WPCargo Track Trace Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31609 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPCargo Track & Trace: from n/a through 7.0.6. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31609"> read more </a> </article> <hr> <article> <h3> CVE-2025-31610 - Gingerplugins Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31610 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme allows Stored XSS. This issue affects Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme: from n/a through 1.1. <strong>Severity:</strong> 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31610"> read more </a> </article> <hr> <article> <h3> CVE-2025-31611 - Shaharia Azam Auto Post After Image Upload Missing Authorization </h3> <p> <strong>CVE ID : </strong>CVE-2025-31611 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Shaharia Azam Auto Post After Image Upload allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Post After Image Upload: from n/a through 1.6. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31611"> read more </a> </article> <hr> <article> <h3> CVE-2025-31613 - AB Google Map Travel CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-31613 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Aboobacker. AB Google Map Travel allows Cross Site Request Forgery. This issue affects AB Google Map Travel : from n/a through 4.6. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31613"> read more </a> </article> <hr> <article> <h3> CVE-2025-31614 - Hiroprot Web Page Generation Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31614 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hiroprot Terms Before Download allows Stored XSS. This issue affects Terms Before Download: from n/a through 1.0.4. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31614"> read more </a> </article> <hr> <article> <h3> CVE-2025-31615 - Owenr88 Simple Contact Forms Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31615 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in owenr88 Simple Contact Forms allows Stored XSS. This issue affects Simple Contact Forms: from n/a through 1.6.4. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31615"> read more </a> </article> <hr> <article> <h3> CVE-2025-31616 - Varnish WordPress CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-31616 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in AdminGeekZ Varnish WordPress allows Cross Site Request Forgery. This issue affects Varnish WordPress: from n/a through 1.7. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31616"> read more </a> </article> <hr> <article> <h3> CVE-2025-31617 - PostmarkApp Email Integrator CSRF Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31617 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Gagan Deep Singh PostmarkApp Email Integrator allows Cross Site Request Forgery. This issue affects PostmarkApp Email Integrator: from n/a through 2.4. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31617"> read more </a> </article> <hr> <article> <h3> CVE-2025-31618 - Jaap Jansma Connector to CiviCRM Unauthenticated Authorization Bypass </h3> <p> <strong>CVE ID : </strong>CVE-2025-31618 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.9. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31618"> read more </a> </article> <hr> <article> <h3> CVE-2025-31620 - Carperfer CoverManager Stored Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-31620 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carperfer CoverManager allows Stored XSS. This issue affects CoverManager: from n/a through 0.0.1. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31620"> read more </a> </article> <hr> <article> <h3> CVE-2025-31621 - byBrick Accordion Stored Cross-Site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31621 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in davidpaulsson byBrick Accordion allows Stored XSS. This issue affects byBrick Accordion: from n/a through 1.0. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31621"> read more </a> </article> <hr> <article> <h3> CVE-2025-31623 - Rich Text Editor CSRF-Stored XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31623 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in richtexteditor Rich Text Editor allows Stored XSS. This issue affects Rich Text Editor: from n/a through 1.0.1. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31623"> read more </a> </article> <hr> <article> <h3> CVE-2025-31624 - LABCAT Processing Projects Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31624 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LABCAT Processing Projects allows DOM-Based XSS. This issue affects Processing Projects: from n/a through 1.0.2. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31624"> read more </a> </article> <hr> <article> <h3> CVE-2025-31625 - Useinfluence Stored Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-31625 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ramanparashar Useinfluence allows Stored XSS. This issue affects Useinfluence: from n/a through 1.0.8. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31625"> read more </a> </article> <hr> <article> <h3> CVE-2025-31627 - Media Library Assistant Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-31627 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media Library Assistant allows Stored XSS. This issue affects Media Library Assistant: from n/a through 3.24. <strong>Severity:</strong> 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31627"> read more </a> </article> <hr> <article> <h3> CVE-2025-31629 - Infusionsoft Web Form JavaScript Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-31629 <strong>Published : </strong> March 31, 2025, 1:15 p.m. | 29 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob Allred Infusionsoft Web Form JavaScript allows Stored XSS. This issue affects Infusionsoft Web Form JavaScript: from n/a through 1.1.1. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 13:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31629"> read more </a> </article> <hr> <article> <h3> CVE-2025-23995 - Tantyyellow Cross-site Scripting (XSS) </h3> <p> <strong>CVE ID : </strong>CVE-2025-23995 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ta2g Tantyyellow allows Reflected XSS.This issue affects Tantyyellow: from n/a through 1.0.0.5. <strong>Severity:</strong> 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-23995"> read more </a> </article> <hr> <article> <h3> CVE-2025-2991 - Tenda FH1202 Web Management Interface Improper Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2991 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is an unknown function of the file /goform/AdvSetWrlmacfilter of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2991"> read more </a> </article> <hr> <article> <h3> CVE-2025-2992 - Tenda FH1202 Web Management Interface Improper Access Controls Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2992 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetWrlsafeset of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2992"> read more </a> </article> <hr> <article> <h3> CVE-2025-30963 - Crocoblock JetSmartFilters Cross-site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-30963 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters allows DOM-Based XSS.This issue affects JetSmartFilters: from n/a through 3.6.3. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30963"> read more </a> </article> <hr> <article> <h3> CVE-2025-31419 - Themeix Churel Cross-site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31419 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeix Churel allows DOM-Based XSS.This issue affects Churel: from n/a through 1.0.8. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31419"> read more </a> </article> <hr> <article> <h3> CVE-2025-3021 - e-solutions e-management Path Traversal </h3> <p> <strong>CVE ID : </strong>CVE-2025-3021 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3021"> read more </a> </article> <hr> <article> <h3> CVE-2025-3026 - EJBCA Host Header Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3026 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his own server for the client to send HTTP requests, provided he succeeds in exploiting it. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3026"> read more </a> </article> <hr> <article> <h3> CVE-2025-3027 - EJBCA Path Traversal Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3027 <strong>Published : </strong> March 31, 2025, 11:15 a.m. | 30 minutes ago <strong>Description : </strong>The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially malicious external sites, which can be exploited for phishing or other social engineering attacks. <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 11:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3027"> read more </a> </article> <hr> <article> <h3> CVE-2025-2989 - Tenda Web Management Interface Improper Access Controls Remote Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2989 <strong>Published : </strong> March 31, 2025, 10:15 a.m. | 1 hour, 30 minutes ago <strong>Description : </strong>A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the file /goform/AdvSetWrl of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2989"> read more </a> </article> <hr> <article> <h3> CVE-2025-2990 - Tenda FH1202 Web Management Interface Unauthenticated Remote Code Execution Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2990 <strong>Published : </strong> March 31, 2025, 10:15 a.m. | 1 hour, 30 minutes ago <strong>Description : </strong>A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown processing of the file /goform/AdvSetWrlGstset of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2990"> read more </a> </article> <hr> <article> <h3> CVE-2025-31376 - NanoSupport Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31376 <strong>Published : </strong> March 31, 2025, 10:15 a.m. | 1 hour, 30 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Mayeenul Islam NanoSupport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NanoSupport: from n/a through 0.6.0. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31376"> read more </a> </article> <hr> <article> <h3> CVE-2025-31386 - Simple:Press Missing Authorization Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31386 <strong>Published : </strong> March 31, 2025, 10:15 a.m. | 1 hour, 30 minutes ago <strong>Description : </strong>Missing Authorization vulnerability in Simplepress Simple:Press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple:Press: from n/a through 6.10.11. <strong>Severity:</strong> 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 10:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31386"> read more </a> </article> <hr> <article> <h3> CVE-2025-2071 - "FAST LTA Silent Brick WebUI OS Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2071 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed directly to system-level commands without adequate sanitization or validation. Successful exploitation could allow attackers to execute arbitrary commands on the affected system, potentially resulting in unauthorized access, data leakage, or full system compromise. Affected WebUI parameters are "hd" and "pi". <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2071"> read more </a> </article> <hr> <article> <h3> CVE-2025-2072 - "FAST LTA Silent Brick WebUI Reflected Cross-Site Scripting (XSS)" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2072 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a web page without proper sanitization or encoding. Exploiting this vulnerability, an attacker can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, data theft, and other malicious actions. Affected WebUI parameters are "h", "hd", "p", "pi", "s", "t", "x", "y". <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2072"> read more </a> </article> <hr> <article> <h3> CVE-2025-2984 - "Code-Projects Payroll Management System SQL Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2984 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument emp_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2984"> read more </a> </article> <hr> <article> <h3> CVE-2025-2985 - Code-projects Payroll Management System SQL Injection Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2985 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2985"> read more </a> </article> <hr> <article> <h3> CVE-2025-30961 - Tinuzz Trackserver DOM-Based XSS Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-30961 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tinuzz Trackserver allows DOM-Based XSS.This issue affects Trackserver: from n/a through 5.0.3. <strong>Severity:</strong> 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-30961"> read more </a> </article> <hr> <article> <h3> CVE-2025-31406 - ELEX WooCommerce Subscriber Unauthenticated Access Control Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-31406 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>Subscriber Broken Access Control in ELEX WooCommerce Request a Quote <= 2.3.3 versions. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31406"> read more </a> </article> <hr> <article> <h3> CVE-2025-31410 - Ashish Ajani WP Church Donation CSRF </h3> <p> <strong>CVE ID : </strong>CVE-2025-31410 <strong>Published : </strong> March 31, 2025, 9:15 a.m. | 2 hours, 30 minutes ago <strong>Description : </strong>Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through 1.7. <strong>Severity:</strong> 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 09:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-31410"> read more </a> </article> <hr> <article> <h3> CVE-2025-2982 - Legrand SMS PowerView Remote File Inclusion Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2982 <strong>Published : </strong> March 31, 2025, 8:15 a.m. | 3 hours, 30 minutes ago <strong>Description : </strong>A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <strong>Severity:</strong> 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2982"> read more </a> </article> <hr> <article> <h3> CVE-2025-2983 - "Legrand SMS PowerView OS Command Injection Vulnerability" </h3> <p> <strong>CVE ID : </strong>CVE-2025-2983 <strong>Published : </strong> March 31, 2025, 8:15 a.m. | 3 hours, 30 minutes ago <strong>Description : </strong>A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <strong>Severity:</strong> 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 08:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2983"> read more </a> </article> <hr> <article> <h3> CVE-2025-2402 - Minio Hardcoded Password Remote Authentication Bypass and Data Manipulation Vulnerability in KNIME Business Hub </h3> <p> <strong>CVE ID : </strong>CVE-2025-2402 <strong>Published : </strong> March 31, 2025, 7:15 a.m. | 4 hours, 30 minutes ago <strong>Description : </strong>A hard-coded, non-random password for the object store (minio) of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It is also possible to cause a denial-of-service of most functionality of KNIME Business Hub by writing large amounts of data to the object store directly. There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub: * 1.13.2 or later * 1.12.3 or later * 1.11.3 or later * 1.10.3 or later <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2402"> read more </a> </article> <hr> <article> <h3> CVE-2025-2980 - Legrand SMS PowerView Open Redirect Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-2980 <strong>Published : </strong> March 31, 2025, 7:15 a.m. | 4 hours, 30 minutes ago <strong>Description : </strong>A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <strong>Severity:</strong> 3.5 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2980"> read more </a> </article> <hr> <article> <h3> CVE-2025-2981 - Legrand SMS PowerView Cross Site Scripting </h3> <p> <strong>CVE ID : </strong>CVE-2025-2981 <strong>Published : </strong> March 31, 2025, 7:15 a.m. | 4 hours, 30 minutes ago <strong>Description : </strong>A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. <strong>Severity:</strong> 3.5 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-2981"> read more </a> </article> <hr> <article> <h3> CVE-2025-3019 - KNIME Business Hub Cross-Site Scripting Vulnerability </h3> <p> <strong>CVE ID : </strong>CVE-2025-3019 <strong>Published : </strong> March 31, 2025, 7:15 a.m. | 4 hours, 30 minutes ago <strong>Description : </strong>KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existing data. The issues are caused by a bug https://github.com/Baroshem/nuxt-security/issues/610 in the widely used nuxt-security module. There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub: * 1.13.3 or later * 1.12.4 or later <strong>Severity:</strong> 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more... </p> <p class="feed-time"> Mon, 31 Mar 2025 07:15:00 GMT </p> <a class="feed-link" href="https://cvefeed.io/vuln/detail/CVE-2025-3019"> read more </a> </article> <hr> <article> <h3> REMPAR25 : les inscriptions sont ouvertes ! </h3> <p><span class="field field--name-title field--type-string field--label-hidden">REMPAR25 : les inscriptions sont ouvertes !</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_rempar25.png?h=284f21b9&itok=Mr6Hc52C"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_rempar25.png?h=284f21b9&itok=01ws_jFK"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_rempar25.png?h=284f21b9&itok=oassvA5I"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_rempar25.png?h=284f21b9&itok=ESX29Qkx"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_rempar25.png?h=284f21b9&itok=Mr6Hc52C" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-28T13:36:43+00:00" title="Vendredi 28 Mars 2025 - 13:36" class="datetime">ven 28/03/2025 - 13:36</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Fort du succès de REMPAR22 et de ses enseignements, l’ANSSI avec le soutien du Club de la Continuité d'Activité (CCA) et du Club de la sécurité de l’information français (CLUSIF) vous invite à participer à l'exercice de crise massifié REMPAR25 le 18 septembre 2025.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>L'objectif de l’exercice ? Eprouver les capacités des organisations à faire face à une cyberattaque systémique. REMPAR25 vise à aider les organisations participantes de franchir une première étape en matière de maturité à la gestion de crise, en continuité d’activité cyber ainsi que de tester leurs dispositifs en place, pour ceux qui en disposent.</p> <p>Cet exercice de crise de niveau stratégique et opérationnel, s'adresse à toutes les organisations, quelle que soit leur maturité en gestion de crise cyber, leur taille et leur secteur d'activité. Déployée dans tous les territoires, cette nouvelle édition offre la possibilité de participer dans toute la France.</p> <p>REMPAR25 est dédié à l’entrainement des différents métiers et compétences d’une organisation, tels que :</p> <ul><li>la communication,</li> <li>les ressources humaines,</li> <li>les métiers juridiques,</li> <li>les métiers du numérique,</li> <li>les instances de décision.</li> </ul><p>Retrouvez <a href="https://www.dailymotion.com/video/k58NtJnopeTNsKCGfjg">le replay vidéo du 1er webinaire de lancement</a> qui présente les modalités d’inscription et de l’exercice.</p> <p>Avant de vous inscrire, <a href="https://cyber.gouv.fr/actualites/publication-dun-outil-dautoevaluation-de-gestion-de-crise-cyber">évaluez votre niveau de maturité cyber grâce à l’outil d’autoévaluation</a>.</p> <p>Puis, inscrivez-vous pour participer à l’exercice de crise avant le 10 mai 2025, <a href="https://www.evenements.cyber.gouv.fr/public/events/73921/website/home">via ce lien</a>. </p> <p>Une fois votre inscription soumise, nous vous confirmerons la modalité retenue en fonction des possibilités. Plusieurs webinaires thématiques de préparation à l’exercice s'étendront de mai à septembre 2025.</p> <p>Pour en savoir plus : <a href="https://cyber.gouv.fr/actualites/production-du-groupe-de-travail-gestion-de-crise-et-entrainement-et-mise-disposition-du">REMPAR22</a></p> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Fri, 28 Mar 2025 13:36:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/rempar25-les-inscriptions-sont-ouvertes"> read more </a> </article> <hr> <article> <h3> Fuite de données chez MAIF BPCE </h3> <p>nom, genre, date de naissance, situation matrimoniale et professionnelle, adresse postale, adresse email, numéro de téléphone, revenus, patrimoine, numéro de sociétaire</p> <p class="feed-time"> Fri Mar 28 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#MAIF BPCE-2025-03-28"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr dévoile les tendances de la menace cyber en France </h3> <p><p>À l’occasion de la publication de son rapport d’activité, Cybermalveillance.gouv.fr présente les tendances clés de la menace qui ont marqué l’année 2024.</p> </p> <p class="feed-time"> Thu, 27 Mar 2025 10:18:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/rapport-activite-2024"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Oracle Cloud </h3> <p>authentification LDAP, serveur SSO, clefs d’authentification</p> <p class="feed-time"> Thu Mar 27 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Oracle Cloud-2025-03-27"> read more </a> </article> <hr> <article> <h3> L’ANSSI vous donne rendez-vous au Forum InCyber 2025 ! </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI vous donne rendez-vous au Forum InCyber 2025 !</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_fic_2025.jpg?h=284f21b9&itok=zG9ouW4y"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_fic_2025.jpg?h=284f21b9&itok=x7YKUTdM"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_fic_2025.jpg?h=284f21b9&itok=BDRxKjrS"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_fic_2025.jpg?h=284f21b9&itok=hyRQaAk-"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_fic_2025.jpg?h=284f21b9&itok=zG9ouW4y" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-26T10:51:36+00:00" title="Mercredi 26 Mars 2025 - 10:51" class="datetime">mer 26/03/2025 - 10:51</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Du 1er au 3 avril 2025, l’ANSSI participe au Forum InCyber (FIC) à Lille, rendez-vous annuel important pour un grand nombre d’acteurs de la cybersécurité. L’Agence est présente au FIC pour échanger avec ses interlocuteurs du quotidien et assurer ses missions de prévention et de sensibilisation. </div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3><strong>Échangez avec nos experts</strong></h3> <p>Sur le stand ANSSI (stand D-6, hall D du Grand Palais), nos agents vous accueillent, présentent nos dernières actualités et répondent à vos questions au travers de sept corners thématiques : le CERT-FR, le Centre de formation SSI, la Directive NIS 2, l’Innovation, l’Industrie et la Technologie, le Management de la sécurité numérique, ou encore le Recrutement.</p> <p> </p> <h3><strong>Découvrez la programmation détaillée des ateliers </strong></h3> <p>L’ANSSI anime, sur son stand, des ateliers lors des 3 jours du salon. Ceux-ci ont pour objectif de mettre en avant des sujets structurants pour l’écosystème cyber en proposant des expériences interactives à nos communautés. Rendez-vous sur le stand de l’ANSSI :</p> <h4><strong>L’IA au service de la détection : enjeux et impacts ? Retour sur une étude du marché français</strong></h4> <p><em>Comment est utilisée l'IA au service des capacités de détection et de réponse aux incidents cyber ? L’ANSSI et Wavestone présenteront leur étude du marché français, issue d’entretiens menés avec une vingtaine d’éditeurs.</em></p> <ul><li>Mardi 1<sup>er</sup> avril – 11h30-12h00</li> <li>Mercredi 2 avril - 14h30-15h00</li> <li>Jeudi 3 avril – 10h00-10h30</li> </ul><h4><strong>MesServicesCyber : la plateforme de l’offre de services cyber de l’ANSSI</strong></h4> <p><em>Venez découvrir MesServicesCyber, la plateforme de l’offre de services de l’ANSSI et la dernière innovation du laboratoire d’innovation publique de l’ANSSI. MesServicesCyber permet de faire découvrir à tous les bénéficiaires les services et ressources proposés par l’ANSSI, en réponse à leurs besoins.</em></p> <ul><li>Mardi 1<sup>er</sup> avril - 15h00-15h30</li> <li>Jeudi 3 avril – 11h00-11h30</li> </ul><h4><strong>Le Lab d’innovation de l’ANSSI et ses projets</strong></h4> <p><em>Venez découvrir le Lab d’innovation de l’ANSSI et échanger avec son équipe. Missions, métiers, méthodes, projets et impact : un Lab d’innovation pour construire, ensemble, les leviers de politiques publiques cyber de demain ! Découvrez également les dernières nouveautés des solutions innovantes : MonServiceSécurisé, MonAideCyber, MesServicesCyber, CyberEnJeux.</em></p> <ul><li>Mardi 1<sup>er</sup> avril – 16h30-17h15</li> <li>Mercredi 2 avril – 16h00-16h45</li> </ul><h4><strong>La certification à l’ANSSI</strong></h4> <p><em>Cet atelier a pour objectifs de présenter la certification de produits de sécurité émise en France ainsi que les travaux de la cellule certification européenne qui s'applique à faire valoir les intérêts français et européens en matière de certification de produits de sécurité. Durant cet atelier, l’ANSSI, acteur majeur de la certification en France et à l’international, présentera ses activités de certification nationale et les orientations européennes en cours</em></p> <ul><li>Mardi 1<sup>er</sup> avril – 16h00-16h30</li> <li>Jeudi 3 avril – 12h00-12h30</li> </ul><h4><strong>L’homologation de sécurité des systèmes d’information</strong></h4> <p><em>Venez découvrir le nouveau guide de l’homologation de la sécurité des systèmes d’information : simplifiée, proportionnée, construite en tenant compte de vos usages !</em></p> <ul><li>Mardi 1<sup>er</sup> avril – 15h30-16h00</li> <li>Mercredi 2 avril - 16h45-17h15</li> <li>Jeudi 3 avril – 11h30-12h00</li> </ul><h4><strong>Financements européens pour l’écosystème cyber : le Centre de coordination cyber français (NCC-FR) vous accompagne dans vos projets</strong></h4> <p><em>Le Centre de coordination cyber français (NCC-FR) hébergé par l’ANSSI rend visibles et lisibles les dispositifs de soutien financiers permis par les programmes européens Digital Europe et Horizon Europe. Lors de cet atelier, nous explorerons les appels à projets européens pouvant bénéficier à l’écosystème cyber français, et nous reviendrons sur les résultats de l’appel à projets cyber national lancé avec France2030 et Bpifrance.</em></p> <ul><li>Mardi 1<sup>er</sup> avril - 14h00-14h30</li> <li>Mercredi 2 avril – 15h30-16h00</li> </ul><h4><strong>Cybersécurité et actualités de la CNIL</strong></h4> <p><em>Cet atelier, animé par Taïna BOUGANIM, Gaston GAUTRENEAU et Christophe VIVENT, Ingénieurs du Service de l’expertise technologique de la CNIL reviendra sur le bilan des notifications de violations de données, de la stratégie de la CNIL en matière de cybersécurité, ainsi que de la nouvelle recommandation sur l’authentification multifacteur.</em></p> <ul><li>Mercredi 2 avril - 11h30-12h30</li> </ul><p> </p> <h3><strong>Retrouvez-nous lors de temps forts </strong></h3> <ul><li><u>Mercredi 2 avril à 9h00</u> : intervention en plénière de Vincent Strubel, directeur général, au Grand Théâtre</li> <li><u>Mercredi 2 avril à 11h15</u> : intervention d’Aurélie Cotton, cheffe d’Etat Major de la sous-direction stratégique, à la table ronde : « RSSI, faites plus avec moins ? » en salle 3.2</li> <li><u>Mercredi 2 avril à 17h15</u> : intervention en plénière de Vincent Loriot, sous-directeur adjoint Stratégie, « Le défi du passage à l’échelle », au Grand Théâtre</li> <li><u>Jeudi 3 avril à 11h15</u> : intervention de Mathieu Couturier, chef de division management de la sécurité numérique, à la table ronde : « Notation : comment mesurer la cybersécurité ? » en salle 2.3 + 2.4</li> </ul><p> </p> <h3><strong>Interventions aux évènements associés au FIC</strong></h3> <ul><li><u>Mardi 1<sup>er</sup> avril à 9h30</u> : intervention de Moïse Moyal, délégué à la sécurité numérique pour les outre-mer, à la table ronde sur la cybersécurité dans les DROM-COM, en salle 2.2</li> <li><u>Mardi 1<sup>er</sup> avril à 15h35</u> : intervention de Florian Lemoine, chef de projet Transposition NIS 2, à la table ronde « NIS 2 : une course décisive pour les PME et ETI de l’industrie », au Théâtre Marie Curie</li> <li><u>Mardi 1<sup>er</sup> avril à 14h00</u> : intervention d’Elyes Lehtihet, responsable de segment identité et confiance numérique, sur « Comment sécuriser l’identité numérique ? », en salle 3.2</li> </ul><p> </p> <p><u>En savoir plus</u> : <a href="https://europe.forum-incyber.com/">FORUM INCYBER – EUROPE (forum-incyber.com)</a></p> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Wed, 26 Mar 2025 10:51:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-vous-donne-rendez-vous-au-forum-incyber-2025"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Centrale Nantes </h3> <p>rapports & projets privés, login et hash des mots de passe utilisateurs, code sources, documents administratifs</p> <p class="feed-time"> Wed Mar 26 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Centrale Nantes-2025-03-26"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cerballiance </h3> <p>nom, prénom, date de naissance, adresse postale, numéro de sécurité sociale, régime de mutuelle, caisse de mutuelle, date de fin de droit</p> <p class="feed-time"> Tue Mar 25 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cerballiance-2025-03-25"> read more </a> </article> <hr> <article> <h3> Opération Cactus : lancement national de la campagne de sensibilisation à lrsquo;hameçonnage dans les espaces numériques de travail </h3> <p>En raison de la multiplication des actes malveillants visant les espaces numériques de travail (ENT), les autorités françaises en charge des sujets de cybersécurité et le ministère de l’Éducation nationale, de l’Enseignement supérieur et de la Recherche ont souhaité mener une action de…</p> <p class="feed-time"> Mon, 24 Mar 2025 22:59:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/cactus-lancement-national"> read more </a> </article> <hr> <article> <h3> Appel à commentaires sur l’ajout d’un volet gestion de crise au référentiel PRIS </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Appel à commentaires sur l’ajout d’un volet gestion de crise au référentiel PRIS</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_appel_a_commentaires_PRIS.png?h=284f21b9&itok=i-4c3ZeR"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_appel_a_commentaires_PRIS.png?h=284f21b9&itok=r_ndnWI0"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_appel_a_commentaires_PRIS.png?h=284f21b9&itok=-_YV8kVd"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_appel_a_commentaires_PRIS.png?h=284f21b9&itok=11tD46Gb"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_appel_a_commentaires_PRIS.png?h=284f21b9&itok=i-4c3ZeR" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-24T08:36:22+00:00" title="Lundi 24 Mars 2025 - 08:36" class="datetime">lun 24/03/2025 - 08:36</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Afin d’enrichir le référentiel d’exigences applicables aux prestataires de réponse aux incidents de sécurité (PRIS), l’ANSSI propose l’intégration d’une activité de « gestion de crise ».</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Afin de compléter la labellisation de prestataires compétents sur la préparation à la gestion de crise d’origine cyber au travers des prestataires d’accompagnement et de conseil en sécurité des systèmes d’information (PACS), l’ANSSI souhaite intégrer une activité de gestion de crise au sein du référentiel d’exigences applicables aux prestataires de réponse aux incidents de sécurité (PRIS).</p> <p>L’activité de gestion de crise est nécessaire dans le cas de situations graves ou complexes, notamment par l’ampleur et les impacts de l’incident vis-à-vis des activités métiers du bénéficiaire et sur besoin capacitaire ou d’expertise relative à la gestion de crise. Elle peut aussi être essentielle si le bénéficiaire n’a pas effectué de préparation à la gestion de crise.</p> <p><u>Ainsi, elle vise à</u> :</p> <ul><li>apporter une assistance en situation de crise afin de limiter les impacts de l’incident.</li> <li>limiter les impacts d’une crise cyber en apportant une capacité de réponse et de soutien adéquate afin de préserver les intérêts du bénéficiaire ou du commanditaire (réputation, continuité des activités, rétablissement des capacités opérationnelles, etc.).</li> </ul><p><u>Sur proposition de cette version, les PRIS de gestion de crise seront capables notamment </u>:</p> <ul><li>de contribuer à la mise en place d’un dispositif de gestion de crise en situation d’urgence ,</li> <li>d’établir un plan d’action de gestion de crise, et d’assurer une cohérence d’ensemble de gestion de crise,</li> <li>d’apporter un premier niveau de conseil à la communication de crise, et connaissances des enjeux cyber et juridiques.</li> </ul><p><em><u>NB</u></em><em> : les PRIS ne se substitueront pas aux différents organes du bénéficiaire (juridique, communication, etc.), ni à leurs responsabilités.</em></p> <p>Cette nouvelle activité est mise en ligne aujourd’hui dans le cadre d’un appel public à commentaires. Les observations, les commentaires et les propositions peuvent être transmis jusqu’au <strong>30 mai 2025</strong>, de préférence par courriel, à l’adresse <a href="mailto:commentaires-passipdispris@ssi.gouv.fr">commentaires-passipdispris@ssi.gouv.fr</a> et à l’aide de la fiche de lecture ci-dessous.</p> <p>La possibilité de faciliter les évaluations des prestataires candidats à la fois à la qualification PACS sur l’activité de préparation à la gestion de crise et à la qualification PRIS sur l’activité de gestion de crise sera étudiée une fois les exigences relatives à la gestion de crise dans le référentiel PRIS finalisées.</p> <p>Pour faciliter la relecture, l’ANSSI fournit le référentiel avec marques de révision.</p> <p>L’ANSSI remercie par avance tous ceux qui répondront à cet appel à commentaires.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/20250321_NP_ANSSI_SDE_PSS_BQA_553_PJb_R%C3%A9f%C3%A9rentiel-PRIS-v3.1_sans%20marque%20de%20r%C3%A9vision.pdf" download=""> <div class="mimetype pdf">PDF</div> <div class="name">20250321_NP_ANSSI_SDE_PSS_BQA_553_PJb_Référentiel-PRIS-v3.1_sans marque de révision.pdf</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/20250321_NP_ANSSI_SDE_PSS_BQA_553_PJa_R%C3%A9f%C3%A9rentiel-PRIS-v3.1_avec%20marques%20de%20r%C3%A9vision.pdf" download=""> <div class="mimetype pdf">PDF</div> <div class="name">20250321_NP_ANSSI_SDE_PSS_BQA_553_PJa_Référentiel-PRIS-v3.1_avec marques de révision.pdf</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/20250321_NP_ANSSI_SDE_PSS_BQA_553_PJc_anssi-pris3.1-appel_a_commentaires-fiche_de_lecture-GdC.xlsx" download=""> <div class="mimetype vnd.openxmlformats-officedocument.spreadsheetml.sheet">VND.OPENXMLFORMATS-OFFICEDOCUMENT.SPREADSHEETML.SHEET</div> <div class="name">20250321_NP_ANSSI_SDE_PSS_BQA_553_PJc_anssi-pris3.1-appel_a_commentaires-fiche_de_lecture-GdC.xlsx</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 24 Mar 2025 08:36:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/appel-commentaires-sur-lajout-dun-volet-gestion-de-crise-au-referentiel-pris"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Autosur Diagnosur </h3> <p>nom, prénom, adresse email et postale, numéro de téléphone, place d’immatriculation</p> <p class="feed-time"> Mon Mar 24 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Autosur Diagnosur-2025-03-24"> read more </a> </article> <hr> <article> <h3> L’ANSSI partage en open source un outil de test du protocole industriel OPC UA </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI partage en open source un outil de test du protocole industriel OPC UA</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_fuzzy_sully.png?h=284f21b9&itok=inYbUfLs"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_fuzzy_sully.png?h=284f21b9&itok=vlD1XSLG"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_fuzzy_sully.png?h=284f21b9&itok=XABg8OLH"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_fuzzy_sully.png?h=284f21b9&itok=hrWtwsZE"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_fuzzy_sully.png?h=284f21b9&itok=inYbUfLs" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-20T12:11:53+00:00" title="Jeudi 20 Mars 2025 - 12:11" class="datetime">jeu 20/03/2025 - 12:11</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">L’outil « fuzzysully » est un fuzzer qui permet d’évaluer la sécurité de l’implémentation du protocole OPC UA utilisé dans le secteur industriel. Son code est désormais disponible pour tous.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Dans sa mobilisation pour accroître le niveau de sécurité des systèmes d’information (SI) industriels, l’ANSSI souhaite <strong>favoriser et encourager l’adoption du protocole <em>Open Platform Communications Unified Architecture</em> (« OPC UA »)</strong>. Le protocole OPC UA est un standard international, open source, définissant la communication entre les différents constituants d’un système d’information industriel. Ce standard, nativement sécurisé, ouvert et interopérable, est largement adopté par les organisations du secteur de l’industrie.</p> <p><strong>L’Agence soutient activement l’utilisation de ce protocole au sein de l’écosystème numérique</strong>, notamment pour les SI industriels répondant à de forts enjeux de sécurité comme certains systèmes d’information d’importance vitale (SIIV) et certains systèmes d’information essentiels (SIE).</p> <p><strong>Courant 2024, l’ANSSI a sous-traité à la société Quarkslab le développement de « fuzzysully », un <em>fuzzer</em> pour le protocole OPC UA</strong>. <strong>L’ANSSI publie ce jour cet outil <a href="https://github.com/ANSSI-FR/fuzzysully">sur le dépôt Github de l’Agence</a></strong>.</p> <p>Cette publication s’inscrit dans <a href="https://cyber.gouv.fr/open-source-lanssi">la démarche générale de l’ANSSI</a> visant à partager avec la communauté cyber les codes qu’elle produit et à accroître le niveau de sécurité des logiciels open source. L’Agence assurera le maintien en conditions de sécurité (MCS) de <strong>fuzzysully</strong> mais ne prévoit pas de le faire évoluer.</p> <p><strong>L’ANSSI invite l’écosystème cyber à s’approprier cet outil de manière à évaluer la robustesse de différentes implémentations du protocole OPC UA et ainsi à participer à l’amélioration de la sécurité des SI industriels.</strong> Pour toutes remarques ou questions : <u>industries [at] ssi.gouv.fr</u>.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--texte paragraph--view-mode--default"> <h2>Qu’est-ce qu’un fuzzer ? Qu’est-ce que le fuzzing ?</h2> <div class="text-exergue"> <div class="text"> </div> <div class="exergue"> <div class="field field--name-field-text field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Un <em>fuzzer</em> est un outil qui injecte automatiquement dans un programme, des entrées aléatoires, invalides, inattendues ou malformées pour éprouver sa capacité à résister à des cas non envisagés lors d’une utilisation normale.</p> <p>L'objectif du <em>fuzzing</em> est d'identifier, au moyen d’un <em>fuzzer</em>, des bugs, des vulnérabilités ou des comportements inattendus, tels que des plantages (crashs), des fuites de mémoire ou d’autres défauts pouvant mettre en péril la sécurité du programme.</p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 20 Mar 2025 12:11:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-partage-en-open-source-un-outil-de-test-du-protocole-industriel-opc-ua"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Intersport </h3> <p>n° de transaction, n° de facture, n° de référence PayPal, code de transaction, date de début / date de fin de la transaction, transaction débitée ou créditée, montant brut de la transaction, n° de compte du payeur, pseudo de l’acheteur, adresse de livraison et de facturation, identifiant utilisateur, nom et prénom,, source de paiement, numéro de la carte de fidélité</p> <p class="feed-time"> Thu Mar 20 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Intersport-2025-03-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Éclaireuses et Éclaireurs de France </h3> <p>nom, prénom, genre, date et lieu de naissance, adresse, profession, email, téléphone fixe et mobile</p> <p class="feed-time"> Thu Mar 20 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Éclaireuses et Éclaireurs de France-2025-03-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Laforêt </h3> <p>dossier locataire, pièces d’identité, RIB</p> <p class="feed-time"> Thu Mar 13 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Laforêt-2025-03-13"> read more </a> </article> <hr> <article> <h3> Panorama de la cybermenace 2024 : mobilisation et vigilance face aux attaquants </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Panorama de la cybermenace 2024 : mobilisation et vigilance face aux attaquants</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/panorama_2024_actu_web.jpg?h=a0a8cbe2&itok=NgnzlS3w"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/panorama_2024_actu_web.jpg?h=a0a8cbe2&itok=JZAee1vN"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/panorama_2024_actu_web.jpg?h=a0a8cbe2&itok=Fn-RYGLE"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/panorama_2024_actu_web.jpg?h=a0a8cbe2&itok=9CBrGfvX"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/panorama_2024_actu_web.jpg?h=a0a8cbe2&itok=NgnzlS3w" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-11T08:10:19+00:00" title="Mardi 11 Mars 2025 - 08:10" class="datetime">mar 11/03/2025 - 08:10</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Le panorama de la cybermenace 2024 dresse le bilan d’une année marquée par une pression désormais constante pesant tant sur l’écosystème national que sur les systèmes d’information les plus critiques. Pour faire face, l’ensemble des acteurs cyber français sont enjoints à maintenir leur mobilisation et leur vigilance de tous les instants.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Au cours de l’année 2024, l’ANSSI a traité, avec différents niveaux de mobilisation, 4 386 événements de sécurité<sup>1</sup>, soit une augmentation de 15 % par rapport à l’année précédente. Ainsi, 3 004 signalements<sup>2</sup> et 1 361 incidents<sup>3</sup> ont été portés à la connaissance de l’Agence.</p> <h3>Trois principales menaces : cybercriminels, attaquants réputés liés à la Russie et attaquants réputés liées à la Chine</h3> <p>La menace portée par l’écosystème cybercriminel - principalement caractérisée par des attaques visant l’extorsion de rançons, <em>via</em> des fuites de données et des attaques par rançongiciel – s’est imposée comme un risque global et quotidien pour toutes les organisations françaises. Parmi les victimes de rançongiciels connues de l’ANSSI, les PME/TPE/ETI (37 %), les collectivités territoriales (17 %), ainsi que les établissements d’enseignement supérieur (12 %) et les entreprises stratégiques (12 %) ont été plus particulièrement touchés, avec des conséquences souvent très graves sur leur fonctionnement, leur réputation et leur continuité d’activité.</p> <p>Une hausse des attaques à but de déstabilisation a également été observée, généralement menées par des groupes dits « hacktivistes » cherchant à attirer l’attention en mettant en œuvre des attaques de faible technicité mais à forte visibilité. Par exemple, les attaques par déni de service (DDoS) contre des cibles françaises ont doublé par rapport à 2023, avec une recrudescence pendant la période des Jeux. Malgré les conséquences limitées de ces dernières, le sabotage de petites installations industrielles a aussi été relevé. Ces attaques représentent une évolution vers une logique de sabotage, pour laquelle une vigilance s’impose.</p> <p>À l’instar des années précédentes, ce sont les attaques à finalité d’espionnage qui ont le plus mobilisé les équipes opérationnelles de l’ANSSI. Les attaquants réputés liés aux intérêts stratégiques russes ont poursuivi leurs attaques guidées principalement par la recherche d’informations pouvant soutenir leurs efforts militaires ou diplomatiques. De son côté, l’activité associée aux modes opératoires réputés chinois a été particulièrement dense et répandue à des fins de captation de renseignements d’ordres stratégique et économique. Par ailleurs, le ciblage d’opérateurs de télécommunications s’est avéré intense et plusieurs incidents d’importance ont été traités par l’Agence.</p> <h3>Mobilisation et vigilance des acteurs français : l'héritage indispensable des jeux</h3> <p>L’année 2024 a été marquée par l’organisation des JOP, dont l’exposition médiatique et la surface d’attaque ont constitué des opportunités majeures pour les acteurs malveillants. Cependant, aucune de ces attaques n’a porté atteinte au déroulement de l’événement grâce à la bonne préparation et la grande mobilisation des équipes de l’ANSSI et de l’ensemble de l’écosystème cyber français.</p> <p>Outre des opportunités conjoncturelles comme les Jeux, les attaquants se saisissent de toutes les faiblesses techniques exposées par les systèmes d’information (SI). Face à ce niveau de sécurité insuffisant, l’Agence enjoint les organisations à durcir et maintenir en condition de sécurité leurs SI afin de réduire la surface d’attaque. En particulier, au regard du nombre et de l’impact des vulnérabilités affectant les équipements de sécurité situés en bordure de SI – qui ont représenté plus de la moitié des opérations de cyberdéfense de l’ANSSI - l’Agence rappelle la nécessité urgente d’appliquer les correctifs de sécurité et ce le plus rapidement possible afin de se protéger d’exploitations opportunistes.</p> <h3>L'ANSSI au c<strong>œ</strong>ur d'un collectif, pour une nation cyber-résiliente</h3> <p>L’année écoulée a conforté l’Agence dans sa volonté de consolider un écosystème relai efficace. En effet, le renforcement des acteurs qui le composent, tels que les centres de réponse à incidents cyber (CSIRT) territoriaux, sectoriels ou ministériels, a déjà permis à l’ANSSI de concentrer son implication sur des attaques ayant des impacts plus critiques.</p> <p>Face à l'ensemble de ces menaces, la France n'est pas désarmée : les travaux sur le volet cyber du projet de loi Résilience, visant à transporter la directive NIS 2 en France, constituent un pan essentiel de sa réponse. La démarche de co-construction choisie pour cette transposition a permis d'adapter au mieux le texte aux réalités et enjeux des entités afin d'en favoriser son appropriation et sa mise en œuvre</p> <p>Enfin, il apparaît indispensable pour l’ANSSI de maintenir la pression sur l’écosystème cybercriminel en poursuivant sa coopération avec les autres services de l'État et les partenaires internationaux. Cette coopération a notamment permis de réaliser des opérations de démantèlement sur l’année écoulée.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://cyber.gouv.fr/publications/panorama-de-la-cybermenace-2024" se="" rendre="" sur="" consultez="" le="" panorama="" de="" la="" cybermenace=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Consultez le Panorama de la cybermenace 2024 </a> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p><sub><em>1 - Événements portés à la connaissance de l’ANSSI et qui ont donné lieu à un traitement par les équipes opérationnelles.</em></sub></p> <p><sub><em>2 - Les signalements regroupent tous les comportements anormaux ou inattendus pouvant avoir un caractère malveillant ou ouvrir la voie à des usages néfastes à l’encontre d’un SI.</em></sub></p> <p><sub><em>3 - Un incident est un évènement de sécurité où l’ANSSI est en mesure de confirmer qu’un acteur malveillant a conduit des actions avec succès sur le système d’information de la victime. À titre d’illustration, un déni de service avec impact ou la compromission de compte de messagerie rentrent dans cette catégorie.</em></sub></p> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Tue, 11 Mar 2025 08:10:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/panorama-de-la-cybermenace-2024-mobilisation-et-vigilance-face-aux-attaquants"> read more </a> </article> <hr> <article> <h3> Appel à commentaires sur le vote par internet pour les élections non politiques [CLOS] </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Appel à commentaires sur le vote par internet pour les élections non politiques [CLOS]</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_vote_electronique.png?h=284f21b9&itok=QFt7hmb_"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_vote_electronique.png?h=284f21b9&itok=1AAXofnm"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_vote_electronique.png?h=284f21b9&itok=mIkV63TL"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_vote_electronique.png?h=284f21b9&itok=ek1tRnmj"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_vote_electronique.png?h=284f21b9&itok=QFt7hmb_" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-10T15:40:31+00:00" title="Lundi 10 Mars 2025 - 15:40" class="datetime">lun 10/03/2025 - 15:40</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Ce guide de recommandations cible la mise en œuvre du vote par Internet pour le vote non politique (associations, élections professionnelles, etc.). Il est destiné aux organisateurs de ces scrutins, aux prestataires fournisseurs de solutions de vote par Internet ainsi qu’aux tiers intervenant dans la vérification de la sincérité des scrutins. </div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Ce guide s'inscrit dans le cadre d'une collaboration avec la Commission Nationale Informatique et Libertés (CNIL) et la mise à jour en 2025 de la recommandation relative à la sécurité des systèmes de vote par correspondance électronique, appelé aussi vote par Internet. Un projet de recommandation a été publié le 20 janvier 2025 <a href="https://www.cnil.fr/fr/recommandation-vote-par-correspondance-electronique-la-cnil-ouvre-une-consultation-publique">sous la forme d’une consultation publique</a>.</p> <p>Précisément, la recommandation de la CNIL définit des objectifs de sécurité à remplir pour protéger les données personnelles et respecter les grands principes électoraux (secret du vote, sincérité du scrutin, transparence). Le guide ANSSI fait, pour chaque objectif CNIL, des recommandations techniques pour répondre à l’objectif.</p> <p>Le guide couvre uniquement le recours au vote par Internet pour les élections non politiques, telles que les élections professionnelles.</p> <p>Les observations, commentaires et propositions peuvent être transmis jusqu’au 11 avril 2025, à l’adresse <a href="mailto:vote-electronique@ssi.gouv.fr">vote-electronique@ssi.gouv.fr</a> et à l’aide de la fiche de relecture ci-dessous.</p> <p><u>Le public cible de cet appel à commentaires inclut</u> :</p> <ul><li>Les organisateurs de scrutin.</li> <li>Les prestataires fournisseurs de solutions de vote par correspondance électronique.</li> <li>Les tiers intervenant dans la vérification de la sincérité des scrutins, en particulier les experts indépendants (au sens de la délibération de la CNIL).</li> </ul><p>L’ANSSI publiera, à l’issue de l’appel à commentaires et après consolidation des commentaires reçus, la version finale du guide ainsi qu’une synthèse anonymisée de ces commentaires.</p> <p>L’ANSSI remercie par avance tous ceux qui répondront à cet appel à commentaires.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/GuideVPI_consultation_publique.pdf" download=""> <div class="mimetype pdf">PDF</div> <div class="name">GuideVPI_consultation_publique.pdf</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--piece-jointe paragraph--view-mode--default"> <div class="field field--name-field-piece-jointe field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">PIèce jointe</div> <div class="field__item"> <div class="document"> <a href="https://cyber.gouv.fr/sites/default/files/document/GuideVPI_fiche_relecture.xlsx" download=""> <div class="mimetype vnd.openxmlformats-officedocument.spreadsheetml.sheet">VND.OPENXMLFORMATS-OFFICEDOCUMENT.SPREADSHEETML.SHEET</div> <div class="name">GuideVPI_fiche_relecture.xlsx</div> <i class="fas fa-download" aria-hidden="true"></i></a> </div> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 10 Mar 2025 15:40:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/appel-commentaires-sur-le-vote-par-internet-pour-les-elections-non-politiques-clos"> read more </a> </article> <hr> <article> <h3> Le label ExpertCyber fête ses 4 ans : retour sur cette caution reconnue par les professionnels </h3> <p>Lancé en 2021 par Cybermalveillance.gouv.fr, le label ExpertCyber s’est imposé comme une référence pour identifier des prestataires de confiance experts en cybersécurité. 4 ans plus tard, il compte 200 entreprises labellisées, offrant leurs services aux professionnels et aux…</p> <p class="feed-time"> Mon, 10 Mar 2025 15:24:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/expertcyber-4-ans"> read more </a> </article> <hr> <article> <h3> L’ANSSI publie son plan stratégique 2025-2027 </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI publie son plan stratégique 2025-2027</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Plan-strat%C3%A9gique-2025-2027-de-lANSSI-1-actu.jpg?h=27342d56&itok=oW66h8IT"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/Plan-strat%C3%A9gique-2025-2027-de-lANSSI-1-actu.jpg?h=27342d56&itok=CHxWcpvf"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/Plan-strat%C3%A9gique-2025-2027-de-lANSSI-1-actu.jpg?h=27342d56&itok=yLBSffuc"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/Plan-strat%C3%A9gique-2025-2027-de-lANSSI-1-actu.jpg?h=27342d56&itok=YYfrEwyF"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Plan-strat%C3%A9gique-2025-2027-de-lANSSI-1-actu.jpg?h=27342d56&itok=oW66h8IT" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-03-06T15:09:01+00:00" title="Jeudi 6 Mars 2025 - 15:09" class="datetime">jeu 06/03/2025 - 15:09</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">A l’issue d’une réflexion collective menée au cours des derniers mois, l’ANSSI publie aujourd’hui son plan stratégique pour la période 2025-2027.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>L’intelligence artificielle, le cloud ou bien encore le développement potentiel d’un ordinateur quantique capable de remettre en cause les propriétés fondamentales de la cryptographie asymétrique, ces technologies bouleversent notre monde et notre approche du cyberespace alors que la menace cyber affecte dorénavant tous les pans de notre économie et de notre société. Cette menace est par ailleurs accentuée par une situation internationale de plus en plus conflictuelle, qui a des répercussions toujours plus significatives dans le cyberespace.</p> <p>Depuis plusieurs années, la France et l’Union européenne (UE) travaillent à la prise en compte de ces paramètres au travers notamment de réseaux de coopération et de différents textes règlementaires (directive sur la sécurité des réseaux et des systèmes d’information (NIS 2), règlement sur la résilience cyber (CRA), etc.), qui participent tous à un objectif d’élévation générale de la cybersécurité de l’UE et de ses Etats membres.</p> <p>La réussite des Jeux olympiques et paralympiques de Paris 2024 (JOP) a été l’aboutissement d’un travail intense durant deux ans des agents de l’ANSSI et de « l’équipe de France » de la cybersécurité dans son ensemble. Au-delà des enseignements qui ont déjà été tirés sur le travail de préparation, d’entrainement et d’articulation avec l’écosystème, y compris international, cette réussite des JOP est venue consacrer un modèle français de la cybersécurité qui repose sur une séparation claire, au sein de l’État, entre les missions défensives et offensives, l’Agence étant chargée de coordonner le champ de la défense et de la protection des systèmes d’information.</p> <p>Forte de ces constats, prenant acte des évolutions du paysage cyber et s’appuyant sur la compétence, l’ouverture et l’agilité qui constituent ses trois valeurs centrales, l’ANSSI a rédigé un nouveau plan stratégique cinq ans après le Manifeste, dernier document stratégique publié par l’Agence à l’occasion de ses 10 ans. Dans le cadre posé par la stratégie nationale de cybersécurité, ce plan a vocation à guider l’ANSSI au cours des prochaines années dans une logique de co-construction avec l’ensemble des parties prenantes et en permettant au collectif national des acteurs de la cybersécurité d’amplifier leurs actions et leur impact.</p> <p>Il est construit autour de 4 axes :</p> <ul><li>Amplifier et coordonner la réponse cyber face à la massification de la menace</li> <li>Développer les expertises indispensables pour contrer les menaces cyber</li> <li>Promouvoir une action cyber européenne et internationale efficace</li> <li>Renforcer la prise en compte des enjeux sociétaux dans l’action de l’ANSSI</li> </ul><p>Avec ce plan, l’ANSSI s’inscrit plus que jamais « au cœur d’un collectif, pour une nation cyber-résiliente ».</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://cyber.gouv.fr/publications/plan-strategique-2025-2027-de-lanssi" se="" rendre="" sur="" consultez="" le="" plan="" strat="" de="" l=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Consultez le plan stratégique de l’ANSSI 2025-2027 </a> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 06 Mar 2025 15:09:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-publie-son-plan-strategique-2025-2027"> read more </a> </article> <hr> <article> <h3> Fuite de données chez UTwin </h3> <p>identité, adresse email, numéro de téléphone</p> <p class="feed-time"> Wed Mar 05 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#UTwin-2025-03-05"> read more </a> </article> <hr> <article> <h3> Fuite de données chez La Poste </h3> <p>nom, prénom, email, adresse postale, année de naissance, numéro de téléphone</p> <p class="feed-time"> Tue Mar 04 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#La Poste-2025-03-04"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Côté Sushi </h3> <p>nom, prénom, date de naissance, coordonnées de contact, programme de fidélité</p> <p class="feed-time"> Tue Mar 04 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Côté Sushi-2025-03-04"> read more </a> </article> <hr> <article> <h3> Fuite de données chez École Nationale de la Sécurité </h3> <p>civilité, nom, prénom, date de naissance, adresse, téléphone, email, ville et payes de naissance, nationalité, numéro de sécurité sociale, numéro Pôle Emploi, numéro carte VTC, diplôme, niveau d’étude</p> <p class="feed-time"> Fri Feb 28 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#École Nationale de la Sécurité-2025-02-28"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Zephir </h3> <p>nom, prénom, email, téléphone, IBAN</p> <p class="feed-time"> Fri Feb 28 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Zephir-2025-02-28"> read more </a> </article> <hr> <article> <h3> Fuite de données chez EDF DPIH </h3> <p>plan d’intervention et de maintenance des centrales, résultats des contrôles et opérations de sécurité, identifiants des agents de maintenance</p> <p class="feed-time"> Fri Feb 28 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#EDF DPIH-2025-02-28"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Nord Emploi </h3> <p>nom, prénom, téléphone, adresse, n° allocataire, organisme référent, formulaire RSA & CAF, CV, date ouverture des droits, date de cessation d’inscription, notification projet personnalisé, modalité accompagnement, status analphabétisme, capacité à utiliser des outils informatiques, solution de garde d’enfant, soutien par un réseau professionnel, nombre de candidatures, vie professionnelle, expérience associative et professionnelle, formations, savoir-faire, métiers envisagés, centre d’intérêt, certification, langue, connaissance des outils bureautique, permis de conduire</p> <p class="feed-time"> Wed Feb 26 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Nord Emploi-2025-02-26"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française de Foot </h3> <p>nom, prénom, genre, date et lieu de naissance, nationalité, adresse postale, adresse email, numéro de téléphone, photo, copie du justificatif d’identité</p> <p class="feed-time"> Fri Feb 21 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française de Foot-2025-02-21"> read more </a> </article> <hr> <article> <h3> L’ANSSI publie son état de la menace sur le cloud computing </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’ANSSI publie son état de la menace sur le cloud computing </span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_EM_cloud_v2.png?h=284f21b9&itok=eivTl0NM"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/actu_web_EM_cloud_v2.png?h=284f21b9&itok=npO_Ym9U"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/actu_web_EM_cloud_v2.png?h=284f21b9&itok=o6VK71hb"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/actu_web_EM_cloud_v2.png?h=284f21b9&itok=SSEmms6U"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/actu_web_EM_cloud_v2.png?h=284f21b9&itok=eivTl0NM" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-02-20T08:36:48+00:00" title="Jeudi 20 Février 2025 - 08:36" class="datetime">jeu 20/02/2025 - 08:36</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">La démocratisation des solutions cloud s’accompagne de nouvelles problématiques en matière de sécurité. Avec cet état de la menace, l’ANSSI offre une cartographie des enjeux auxquels les fournisseurs de services cloud et les organisations qui y ont recours devront faire face, ainsi que ses recommandations.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-media paragraph--view-mode--default"> <div class="text-media"> <div class="align-left media"> <div class="field field--name-field-media4 field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--image-1-2"> <a data-lightbox="public://image/TLPCLEAR_EM_CLOUD_couverture.png" data-title=" Cloud computing - Etat de la menace informatique" data-alt="Couverture document état de la menace informatique sur le secteur du cloud computing" href="https://cyber.gouv.fr/sites/default/files/image/TLPCLEAR_EM_CLOUD_couverture.png" class="lightbox-img"> <figure role="figure" aria-label="Cloud computing - Etat de la menace informatique"><picture><source media="(max-width:767px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/TLPCLEAR_EM_CLOUD_couverture.png?itok=lPwpWAle"><source media="(min-width:768px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/TLPCLEAR_EM_CLOUD_couverture.png?itok=lPwpWAle"><img src="https://cyber.gouv.fr/sites/default/files/styles/scale_only/public/image/TLPCLEAR_EM_CLOUD_couverture.png?itok=lPwpWAle" alt="Couverture document état de la menace informatique sur le secteur du cloud computing" /></source></source></picture><figcaption>Cloud computing - Etat de la menace informatique</figcaption></figure></a> </div> </div> </div> <div class="field field--name-field-te field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>Le <em>cloud computing</em> est devenu partie intégrante de nos usages numériques notamment parce que cette technologie offre de nombreux avantages, mais il est nécessaire de connaître les menaces et de mesurer les risques qui accompagnent son utilisation. Pour ce faire, l’ANSSI met à disposition son état de la menace sur le <em>cloud </em>et partage ses<em> </em>recommandations de sécurité pour y faire face.</p> <h3>L’ environnement <em>cloud,</em> une cible grandissante des cyberattaques</h3> <p>Les environnements<em> cloud </em>sont de plus en plus la cible d’attaquants cherchant à compromettre l’intégrité de ces systèmes. Cela s’explique notamment par l’intérêt pour les données traitées par les fournisseurs de service cloud, mais également parce qu’ils offrent une entrée potentielle vers les organisations qui utilisent ces services.</p> <p>Le ciblage d’environnement cloud fait désormais partie intégrante du mode opératoire des attaquants qui ont développé des compétences bien spécifiques et poursuivent des finalités lucratives, d’espionnage, et ou de déstabilisation. Cette maîtrise grandissante de ces environnements cloud entraîne l’accroissement des tentatives de latéralisation depuis des environnements on-premise compromis vers le cloud et réciproquement.</p> <p>Les vulnérabilités dans des équipements de bordure (tels que des VPN) sont notamment devenues des points d’entrée privilégiés pour les attaquants. Ils exploitent également les mauvaises configurations et les défauts de sécurisation (permissions excessives, applications obsolètes).</p> <h3>L’utilisation du<em> cloud</em> pose de nouveaux défis en matière de sécurité informatique</h3> <p>Une tendance grandissante identifiée par l’ANSSI dans son rapport est l’utilisation des services de <em>cloud</em> comme infrastructures d’attaques. Les acteurs malveillants utilisent désormais des services <em>cloud</em> à des fins malveillantes, dans le but de stocker, des codes malveillants ou des données volées sur des plateformes grand public. Il devient alors très complexe de détecter les activités malveillantes en les dissimulant au sein du trafic légitime des utilisateurs de ces plateformes.</p> <p>Les enjeux de sécurité qui accompagnent l’utilisation du <em>cloud</em> imposent de s’interroger sur les responsabilités qui incombent aussi bien aux fournisseurs de services<em> cloud</em> qu’aux utilisateurs de ces plateformes. L’ANSSI fait le constat que de nombreux incidents de sécurité sont<s> </s>dus à une faiblesse dans le cloisonnement entre les systèmes d’information en partie liée à l’usage du <em>cloud</em> ou aux manquements dans la supervision des systèmes d’information.</p> </div> </div> </div> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><h3>Les recommandations et les bonnes pratiques pour un<em> cloud </em>mieux sécurisé</h3> <p>Dans son état de la menace, l’ANSSI partage ses recommandations, aussi bien pour les fournisseurs de cloud que pour les clients, qui visent à mettre en place des mesures de sécurité claires et des bonnes pratiques.</p> <p>L’hébergement de certaines données dans le cloud nécessitent de réaliser une analyse de risques afin de déterminer l’offre adaptée. Pour accompagner les entités publiques et privées, l’ANSSI met à disposition :</p> <ul><li><a href="https://cyber.gouv.fr/recourir-des-solutions-cloud">ses recommandations sur l’hébergement des systèmes d’informations sensibles dans le cloud</a><u>.</u> Cette série de recommandations précisent, en fonction du type de SI, de la sensibilité des données et du niveau de la menace, les types d’offres cloud à privilégier.</li> </ul><p>L’ANSSI recommande de privilégier des offres cloisonnées entre clients de type SecNumCloud pour des activités sensibles. <a href="https://cyber.gouv.fr/sites/default/files/document/secnumcloud-referentiel-exigences-v3.2.pdf">Le référentiel SecNumCloud</a> propose un ensemble de règles de sécurité à suivre garantissant un haut niveau d’exigence tant du point de vue technique, qu’opérationnel ou juridique.</p> <p>Enfin, le recours au cloud impose la prise en compte de l’évolution des capacités de supervision afin de se prémunir contre les menaces abordées dans le document.</p> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--bouton paragraph--view-mode--default no-space"> <div class="center-wrapper"> <a class="btn " href="https://www.cert.ssi.gouv.fr/cti/CERTFR-2025-CTI-001/" se="" rendre="" sur="" consultez="" l="" de="" menace="" le="" secteur="" cloud=""> <i class="fas fa-arrow-right" aria-hidden="true"></i>Consultez l'état de menace sur le secteur cloud </a> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 20 Feb 2025 08:36:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lanssi-publie-son-etat-de-la-menace-sur-le-cloud-computing"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Service Départemental d'Incendie et de Secours de la Vienne </h3> <p>login, mot de passe hashé, email</p> <p class="feed-time"> Wed Feb 19 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Service Départemental d'Incendie et de Secours de la Vienne-2025-02-19"> read more </a> </article> <hr> <article> <h3> Sommet pour l’action sur l’intelligence artificielle : retour sur les travaux de l’ANSSI </h3> <p><span class="field field--name-title field--type-string field--label-hidden">Sommet pour l’action sur l’intelligence artificielle : retour sur les travaux de l’ANSSI</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Vignette.jpeg?h=92229be0&itok=nt_AzaoH"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/Vignette.jpeg?h=92229be0&itok=gBAuLAPS"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/Vignette.jpeg?h=92229be0&itok=jblLz9WZ"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/Vignette.jpeg?h=92229be0&itok=wsH6ycgU"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/Vignette.jpeg?h=92229be0&itok=nt_AzaoH" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-02-17T15:34:05+00:00" title="Lundi 17 Février 2025 - 15:34" class="datetime">lun 17/02/2025 - 15:34</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">Dans le cadre du Sommet pour l’action sur l'IA, organisé à Paris du 6 au 11 février 2025, l’ANSSI a piloté, au sein de l’axe « IA de confiance », les travaux menés ces derniers mois sur la cybersécurité. L’occasion de promouvoir son approche visant à privilégier une meilleure prise en compte des risques cyber pour développer la confiance dans l’IA.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-media paragraph--view-mode--default"> <div class="text-media"> <div class="align-left media"> <div class="field field--name-field-media4 field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--image-1-2"> <a data-lightbox="public://image/Vincent1_0.jpeg" data-title=" L'ANSSI a organisé un exercice de crise cyber lors du Sommet de l'IA." data-alt="" href="https://cyber.gouv.fr/sites/default/files/image/Vincent1_0.jpeg" class="lightbox-img"> <figure role="figure" aria-label="L'ANSSI a organisé un exercice de crise cyber lors du Sommet de l'IA."><picture><source media="(max-width:767px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_mobile/public/image/Vincent1_0.jpeg?h=92229be0&itok=sYFqJQiA"><source media="(min-width:768px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_desktop/public/image/Vincent1_0.jpeg?h=92229be0&itok=pgVotHPC"><img src="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_mobile/public/image/Vincent1_0.jpeg?h=92229be0&itok=sYFqJQiA" alt="" /></source></source></picture><figcaption>L'ANSSI a organisé un exercice de crise cyber lors du Sommet de l'IA.</figcaption></figure></a> </div> </div> </div> <div class="field field--name-field-te field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p><strong>L’expertise de l’ANSSI au service d’une meilleure appréhension des risques cyber de l’IA</strong></p> <p>En tant qu’autorité nationale en matière de cyberdéfense et de cybersécurité, l’ANSSI a travaillé à l’identification et la bonne compréhension des risques cyber des systèmes d’intelligence artificielle (SIA), en collaboration avec ses partenaires nationaux et internationaux, également réunis à Paris à l’occasion du Sommet pour l’action sur l’IA.</p> <p><strong>Des systèmes d’information qui posent de nouveaux défis à la cybersécurité</strong></p> <p>Dans les travaux qu’elle a menés, l’ANSSI souligne en premier lieu que les systèmes intégrant une IA (SIA) demeurent fondamentalement des systèmes logiciels, soumis en tout état de cause aux mêmes vulnérabilités que des systèmes plus classiques, comme le détournement de comptes utilisateurs ou administrateurs ou l’exploitation de vulnérabilités dans les composants logiciels intégrés dans le système. Les scénarios de cyberattaque classiques restent ainsi aujourd’hui les plus crédibles contre de tels SIA. Le respect des bonnes pratiques de cybersécurité applicables à tout système d’information, est ainsi un enjeu primordial pour la mise en œuvre d’une IA de confiance.</p> <blockquote><p><strong><em> </em></strong><em>« Le temps fort qu’a constitué le Sommet pour l’action sur l’IA a démontré la nécessité de mieux faire travailler ensemble les experts de l’IA et ceux de la cybersécurité afin d’objectiver les risques et opportunités, loin des marchands de peur et des marchands de rêves.», </em>précise Vincent Strubel, directeur général de l’ANSSI.</p> </blockquote> <p><strong>L’ANSSI s’implique dans le développement d’une IA de confiance qui bénéficie à tous</strong></p> <p>Afin d’accompagner le développement d’une IA de confiance qui bénéficie à tous et pour tous les usages, quelle que soit leur criticité, l’ANSSI promeut une approche par les risques.</p> <p>Pour guider notamment les dirigeants et les producteurs de solutions d’IA, plusieurs livrables ont été dévoilés à l’occasion du Sommet :</p> <ul><li>Le document de référence <a href="https://cyber.gouv.fr/en/publications/building-trust-ai-through-cyber-risk-based-approach">« <em>Building trust in AI through a cyber risk approach</em> »</a> : co-signé par de 19 partenaires internationaux et 5 partenaires nationaux a été présenté le 7 février lors des journées scientifiques organisées par l’Institut Polytechnique de Paris. Il met en évidence les risques cyber auxquels sont exposés les systèmes d’IA et relaie les principales recommandations stratégiques afin de favoriser une meilleure prise en compte de la cybersécurité dans le développement et l’intégration de ces systèmes. Cette analyse de risque a été élaborée suite aux consultations de plusieurs entités publiques et privées matures sur le sujet de l’IA, afin de s’assurer de toujours conserver un ancrage des travaux dans le réel. <em><a href="https://cyber.gouv.fr/publications/developper-la-confiance-dans-lia-par-une-approche-par-les-risques-cyber">Un document également disponible en français</a>.</em></li> <li>L’exercice de crise cyber, organisé par l’ANSSI le 11 février au Campus Cyber, a mobilisé près de 200 participants experts cyber et experts IA dans l’objectif de développer une meilleure compréhension mutuelle de leurs attentes. Alors que le scénario proposé comprenait une cyberattaque affectant un SIA et sa chaine d’approvisionnement (supply chain), les participants ont pu échanger des bonnes pratiques tout en étant sensibilisés aux risques cyber. Des axes d’amélioration en matière de gestion de crise cyber ont notamment été identifiés lors de l’exercice et un retour d’expérience sera prochainement organisé.</li> <li>La rencontre des directeurs d’agences cyber partenaires s’est déroulée en parallèle du Sommet. L’ANSSI et ses partenaires internationaux ont pu contribuer activement aux débats en cours sur la sécurisation de l’IA. Tous sont pleinement engagés dans le traitement, à l’échelle internationale, de ces questions, tout en veillant à explorer les modalités d’articulation et de coopération internationale en la matière. </li> </ul></div> </div> </div> </div> </div> </div> </div> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-media paragraph--view-mode--default"> <div class="text-media"> <div class="align-right media"> <div class="field field--name-field-media4 field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--media-anssi paragraph--view-mode--image-1-2"> <a data-lightbox="public://image/2- Business Day - ANSSI.jpg" data-title=" La table-ronde à laquelle a participé l'ANSSI, lors du Business Day." data-alt="" href="https://cyber.gouv.fr/sites/default/files/image/2-%20Business%20Day%20-%20ANSSI.jpg" class="lightbox-img"> <figure role="figure" aria-label="La table-ronde à laquelle a participé l'ANSSI, lors du Business Day."><picture><source media="(max-width:767px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_mobile/public/image/2-%20Business%20Day%20-%20ANSSI.jpg?h=a1e1a043&itok=GF4IVxRq"><source media="(min-width:768px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_desktop/public/image/2-%20Business%20Day%20-%20ANSSI.jpg?h=a1e1a043&itok=2GqEPPyb"><img src="https://cyber.gouv.fr/sites/default/files/styles/image_paragraph_text_media_1_2_mobile/public/image/2-%20Business%20Day%20-%20ANSSI.jpg?h=a1e1a043&itok=GF4IVxRq" alt="" /></source></source></picture><figcaption>La table-ronde à laquelle a participé l'ANSSI, lors du Business Day.</figcaption></figure></a> </div> </div> </div> <div class="field field--name-field-te field--type-entity-reference-revisions field--label-hidden field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>L’ANSSI a également participé au Business Day de l'AI Action Summit, qui a réuni des acteurs économiques français et internationaux à Station F, afin de mettre en avant le rôle transformateur de l’IA pour le développement des entreprises. L’Agence est intervenue à la table ronde intitulée « La gouvernance du Règlement sur l’IA (RIA) en France : comment travailler avec les autorités compétentes ? »<strong> </strong>aux côtés de représentants de la CNIL, du ministère de l’économie (DGCCRF) et de la DGE. Le RIA vise à encadrer le développement et l'utilisation de l'IA pour garantir la sécurité, les droits fondamentaux et la protection des données. L’Agence n’a pas vocation à assumer un rôle d’autorité de surveillance de marché des systèmes d’IA au sens du RIA, mais s’impliquera toutefois sur les aspects de cybersécurité pour :</p> <ul><li>Accompagner les administrations dans le déploiement de leurs systèmes d’IA sur les aspects cybersécurité ;</li> <li>Contribuer à l’évaluation de la cybersécurité des modèles et systèmes d’IA avec les différentes parties impliquées ;</li> <li>Accompagner les offreurs et les acquéreurs de solutions de cybersécurité implémentant de l’IA dans leurs produits ;</li> <li>Sensibiliser l’ensemble de l’écosystème aux enjeux de cybersécurité liés à l’IA ;</li> <li>Participer aux instances de normalisation à l’échelle européenne qui régissent les exigences applicables en matière de cybersécurité aux systèmes d’IA.</li> </ul></div> </div> </div> </div> </div> </div> </div> </div> </p> <p class="feed-time"> Mon, 17 Feb 2025 15:34:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/sommet-pour-laction-sur-lintelligence-artificielle-retour-sur-les-travaux-de-lanssi"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Sport Découverte </h3> <p>nom, prénom, date de naissance, numéro de téléphone, adresse mail</p> <p class="feed-time"> Mon Feb 17 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Sport Découverte-2025-02-17"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Mutuelle des motards </h3> <p>nom, prénom, adresse email, numéro de téléphone, code postal</p> <p class="feed-time"> Thu Feb 13 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Mutuelle des motards-2025-02-13"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Chronopost </h3> <p>nom, prénom, numéro de téléphone, adresse, signature</p> <p class="feed-time"> Wed Feb 12 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Chronopost-2025-02-12"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Caisse des dépôts et des consignations </h3> <p> 70 000 personnes </p> <p class="feed-time"> Wed Feb 12 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Caisse des dépôts et des consignations-2025-02-12"> read more </a> </article> <hr> <article> <h3> Découvrez « Cyber en Clair », la nouvelle campagne de sensibilisation de Cybermalveillance.gouv.fr destinée aux jeunes </h3> <p>À l’occasion de la 22ème édition du Safer Internet Day, la journée internationale pour un Internet plus sûr, Cybermalveillance.gouv.fr lance Cyber en Clair, une campagne pour sensibiliser les jeunes aux usages du numérique. Qu’est-ce que la cybersécurité ? Les téléchargements…</p> <p class="feed-time"> Tue, 11 Feb 2025 09:39:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/campagne-sensibilisation-jeunes-cyber-en-clair"> read more </a> </article> <hr> <article> <h3> Fuite de données chez King Jouet </h3> <p>nom, prénom, email, numéro de téléphone, détail de la commande</p> <p class="feed-time"> Tue Feb 11 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#King Jouet-2025-02-11"> read more </a> </article> <hr> <article> <h3> L’algorithme HAETAE lauréat de la compétition coréenne de cryptographie post-quantique </h3> <p><span class="field field--name-title field--type-string field--label-hidden">L’algorithme HAETAE lauréat de la compétition coréenne de cryptographie post-quantique</span> <div class="field field--name-field-image field--type-entity-reference field--label-hidden field__item"><picture class="image-banniere"><source media="(max-width:766px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/algorithme_haetae.png?h=284f21b9&itok=gGMsFDF1"></source><source media="(min-width:768px) and (max-width:999px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_350/public/image/algorithme_haetae.png?h=284f21b9&itok=OIBN08zL"></source><source media="(min-width:1000px) and (max-width:1200px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1200_250/public/image/algorithme_haetae.png?h=284f21b9&itok=kTVO3AnZ"></source><source media="(min-width:1201px)" srcset="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_1920_328/public/image/algorithme_haetae.png?h=284f21b9&itok=w0-YVn2p"></source><img src="https://cyber.gouv.fr/sites/default/files/styles/contenu_image_banniere_767_400/public/image/algorithme_haetae.png?h=284f21b9&itok=gGMsFDF1" /></picture></div> <span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>anssiadm</span></span> <span class="field field--name-created field--type-created field--label-hidden"><time datetime="2025-02-06T11:05:54+00:00" title="Jeudi 6 Février 2025 - 11:05" class="datetime">jeu 06/02/2025 - 11:05</time></span> <div class="field field--name-field-chapo field--type-string-long field--label-hidden field__item">La compétition KpqC qui a débuté en 2022, visait à sélectionner des algorithmes de cryptographie post-quantique. Julien Devevey, cryptologue du Laboratoire de Cryptographie de l’ANSSI, a participé à la conception de l’algorithme HAETAE qui a remporté cette compétition le 16 janvier 2025.</div> <div class="field field--name-field-corps field--type-entity-reference-revisions field--label-hidden field__items"> <div class="field__item"> <div class="paragraph paragraph--type--op-texte-riche paragraph--view-mode--default"> <div class="text-riche"> <div class="clearfix text-formatted field field--name-field-texte-riche field--type-text-long field--label-hidden field__item"><p>La compétition coréenne, qui a débuté en 2022, visait la sélection et de la standardisation d'algorithmes post-quantiques KpqC qui opposait 16 algorithmes candidats. La cryptographie post quantique est l’ensemble des algorithmes cryptographiques [à clé publique] conçus pour résister non seulement aux attaques des ordinateurs actuels mais également aux attaques d’ordinateurs quantiques de très grande capacité. Les algorithmes post-quantiques peuvent être implémentés sur les ordinateurs actuels.</p> <p>Parmi les 8 candidats qui restaient en lice au terme d'une présélection réalisée en 2023, la compétition a abouti à une sélection finale de 4 algorithmes le 16 janvier 2025.</p> <p>Parmi les deux schémas de signature post-quantique sélectionnés figure HAETAE, fruit d'une coopération entre des équipes françaises, coréennes et allemandes. HAETAE, dont Julien Devevey, cryptologue à l'ANSSI est l'un des concepteurs, est fondé, de même que le standard NIST ML-DSA, sur la difficulté conjecturée du problème de réseaux euclidiens Module-LWE et sur une variante dite avec rejets du paradigme de Fiat-Shamir. Mais il est plus compact que ML-DSA : à niveau de sécurité égal, son intégration dans certains protocoles de l'internet nécessite de ce fait moins de fragmentation.</p> <p>Les trois autres algorithmes de la sélection finale de la compétition KpqC sont un autre schéma de signature, AIMer, et deux schémas de chiffrement et d'établissement de clé, NTRU+ et SMAUG-T.</p> <p><strong>Pour en savoir plus :</strong></p> <ul><li><a href="https://eprint.iacr.org/2023/624.pdf">HAETAE: Shorter Lattice-Based Fiat-Shamir Signatures</a></li> <li><a href="https://kpqc.cryptolab.co.kr/haetae">SMAUG-T & HAETAE - HAETAE</a></li> </ul></div> </div> </div> </div> </div> </p> <p class="feed-time"> Thu, 06 Feb 2025 11:05:00 GMT </p> <a class="feed-link" href="https://cyber.gouv.fr/actualites/lalgorithme-haetae-laureat-de-la-competition-coreenne-de-cryptographie-post-quantique"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Espace-Recettes.fr Vorwerk </h3> <p>nom complet, adresse postale, adresse email, numéro de téléphone, données de préférence Thermomix</p> <p class="feed-time"> Thu Feb 06 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Espace-Recettes.fr Vorwerk-2025-02-06"> read more </a> </article> <hr> <article> <h3> Fuite de données chez AIDES </h3> <p>nom, prénom, date de naissance, adresse postale, téléphone, adresse email, IBAN, numéro de sécurité sociale, résultat d’examen de santé</p> <p class="feed-time"> Mon Jan 27 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#AIDES-2025-01-27"> read more </a> </article> <hr> <article> <h3> Fuite de données chez E.Leclerc </h3> <p>nom, prénom, adresse email, identifiant d’accès, numéro de dossier, montant de prime, libellé de prestation</p> <p class="feed-time"> Fri Jan 24 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#E.Leclerc-2025-01-24"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française Montagne Escalade </h3> <p>nom, prénom, adresse postale, adresse email, identifiant, date de naissance, numéro de téléphone</p> <p class="feed-time"> Fri Jan 24 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française Montagne Escalade-2025-01-24"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française de la montagne et de l'escalade </h3> <p>nom, prénom, sexe, date de naissance, adresse postale, téléphone, adresse email</p> <p class="feed-time"> Thu Jan 23 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française de la montagne et de l'escalade-2025-01-23"> read more </a> </article> <hr> <article> <h3> #PrenezLaConfiance : six acteurs français engagés lancent une campagne commune pour sensibiliser les citoyens aux bons réflexes et améliorer leur confiance dans leurs usages du numérique </h3> <p>Réunis dans le consortium Confiance numérique du quotidien, la Caisse des Dépôts, la Croix-Rouge française, Cybermalveillance.gouv.fr, Docaposte, Inria et Orange lancent, ce 20 janvier, une campagne nationale de sensibilisation aux bons réflexes auprès du grand public. Elle vise à…</p> <p class="feed-time"> Wed, 22 Jan 2025 09:04:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/prenezlaconfiance-campagne"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr lance une AlerteCyber concernant des failles de sécurité critiques dans les produits Microsoft </h3> <p><p>Cybermalveillance.gouv.fr déclenche ce jour une nouvelle AlerteCyber concernant des failles de sécurité critiques dans les produits Microsoft. Il est primordial de les corriger le plus rapidement possible en mettant à jour les systèmes concernés pour réduire les risques d’une cyberattaque.</p> </p> <p class="feed-time"> Mon, 20 Jan 2025 17:49:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/alertecyber-failles-securite-critiques-produits-microsoft"> read more </a> </article> <hr> <article> <h3> Alerte Cyber : Failles de sécurité critiques dans les produits Microsoft </h3> <p>        Failles de sécurité critiques dans les produits Microsoft   Date de l’alerte : 20/01/2025     Risques     Espionnage, vol, voire destruction de vos données suite à la prise de contrôle à distance de vos équipements concernés.  …</p> <p class="feed-time"> Mon, 20 Jan 2025 13:07:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/alerte-cyber-failles-de-securite-critiques-dans-les-produits-microsoft-202501"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française de tir à l'arc </h3> <p>nom, prénom, sexe, date de naissance, adresse postale, téléphone, adresse email, photo de profil</p> <p class="feed-time"> Mon Jan 20 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française de tir à l'arc-2025-01-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Kiabi </h3> <p>nom, prénom, date de naissance, IBAN</p> <p class="feed-time"> Tue Jan 14 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Kiabi-2025-01-14"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française de Roller Skateboard </h3> <p>nom, prénom, adresse email, adresse postale, date et lieu de naissance, numéro de téléphone, numéro de licence</p> <p class="feed-time"> Tue Jan 14 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française de Roller Skateboard-2025-01-14"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Fédération Française de Force </h3> <p> 64 512 comptes </p> <p class="feed-time"> Tue Jan 14 2025 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Fédération Française de Force-2025-01-14"> read more </a> </article> <hr> <article> <h3> L’association ECTI rejoint Cybermalveillance.gouv.fr </h3> <p><p>Créé en 2017 par l’ANSSI et le ministère de l’Intérieur pour permettre à l’État d’apporter une réponse au grand public, aux entreprises et aux collectivités, Cybermalveillance.gouv.fr (GIP ACYMA) accueille 1 nouvelle entité au sein de son dispositif qui compte désormais 64 membres : ECTI.</p> </p> <p class="feed-time"> Thu, 09 Jan 2025 08:12:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/ecti-rejoint-cybermalveillancegouvfr"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cogitis </h3> <p> 82Go </p> <p class="feed-time"> Tue Dec 31 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cogitis-2024-12-31"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Atos </h3> <p> </p> <p class="feed-time"> Mon Dec 30 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Atos-2024-12-30"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Arsoé </h3> <p> </p> <p class="feed-time"> Fri Dec 27 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Arsoé-2024-12-27"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Volkswagen </h3> <p>données client, localisation</p> <p class="feed-time"> Fri Dec 27 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Volkswagen-2024-12-27"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Peugeot </h3> <p> </p> <p class="feed-time"> Thu Dec 26 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Peugeot-2024-12-26"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cyberhaven </h3> <p> </p> <p class="feed-time"> Wed Dec 25 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cyberhaven-2024-12-25"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Wakanim </h3> <p> </p> <p class="feed-time"> Fri Dec 20 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Wakanim-2024-12-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Sport 2000 </h3> <p> </p> <p class="feed-time"> Fri Dec 20 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Sport 2000-2024-12-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Go Sport </h3> <p> </p> <p class="feed-time"> Fri Dec 20 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Go Sport-2024-12-20"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Electro Dépôt </h3> <p> </p> <p class="feed-time"> Fri Dec 20 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Electro Dépôt-2024-12-20"> read more </a> </article> <hr> <article> <h3> 17Cyber : kit de communication </h3> <p><p>Dans le cadre du lancement du 17Cyber, Cybermalveillance.gouv.fr met à votre disposition un kit de communication complet à diffuser auprès de vos publics.</p> </p> <p class="feed-time"> Tue, 17 Dec 2024 11:00:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/17cyber-kit-communication"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr vous propose d’adopter le module 17Cyber </h3> <p><p>Cybermalveillance.gouv.fr crée le module « Assistance Cyber en Ligne » pour faciliter l’accès à son service de diagnostic et d’assistance aux victimes.</p> </p> <p class="feed-time"> Tue, 17 Dec 2024 10:15:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/module-assistance-17cyber"> read more </a> </article> <hr> <article> <h3> 17Cyber, le nouveau réflexe d’assistance en ligne pour toutes les victimes de cybermalveillance </h3> <p><p>Face à la menace numérique croissante, la Police nationale, la Gendarmerie nationale et Cybermalveillance.gouv.fr s’associent et lancent conjointement le site 17Cyber : https://17cyber.gouv.fr/</p> </p> <p class="feed-time"> Tue, 17 Dec 2024 10:13:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/lancement-17cyber"> read more </a> </article> <hr> <article> <h3> Soldes drsquo;hiver : 7 conseils pour éviter les cyber-arnaques </h3> <p><p>Durant les périodes promotionnelles, Cybermalveillance.gouv.fr appelle à la plus grande vigilance et délivre 7 conseils pour éviter de se faire escroquer. </p> </p> <p class="feed-time"> Sun, 15 Dec 2024 09:00:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/7-conseils-pour-eviter-les-cyberescroqueries"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Top Achat </h3> <p>nom, prénom, email, addresse</p> <p class="feed-time"> Thu Dec 12 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Top Achat-2024-12-12"> read more </a> </article> <hr> <article> <h3> Alerte : campagne de messages drsquo;escroquerie à lrsquo;indemnisation usurpant l’identité de Cybermalveillance.gouv.fr </h3> <p>Depuis fin novembre 2024, une campagne de mails d’hameçonnage usurpant l’identité de Cybermalveillance.gouv.fr est en cours. Dans ces messages, une personne prétendant être un agent de Cybermalveillance.gouv.fr contacte de potentielles ou d’anciennes victimes d’escroquerie pour…</p> <p class="feed-time"> Tue, 10 Dec 2024 15:41:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/alerte-campagne-de-messages-frauduleux-usurpant-lidentite-de-cybermalveillance-gouv-fr-202412"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Deloitte </h3> <p> </p> <p class="feed-time"> Wed Dec 04 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Deloitte-2024-12-04"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Guy Demarle </h3> <p>nom, prénom, adresse postale, adresse email, numéro de téléphone</p> <p class="feed-time"> Tue Dec 03 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Guy Demarle-2024-12-03"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Norauto </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone, numéro de pièce d’identité</p> <p class="feed-time"> Mon Dec 02 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Norauto-2024-12-02"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Ze Camping </h3> <p>nom, prénom, login, mot de passe hashé, date de naissance, téléphone, adresse postale</p> <p class="feed-time"> Wed Nov 27 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Ze Camping-2024-11-27"> read more </a> </article> <hr> <article> <h3> Fuite de données chez JVS </h3> <p>nom, prénom, adresse email, login, numéro de téléphone, collectivité</p> <p class="feed-time"> Tue Nov 26 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#JVS-2024-11-26"> read more </a> </article> <hr> <article> <h3> Fuite de données chez SFR </h3> <p>nom, prénom, adresse email, adresse postale, code postal, ville, date de naissance, département de naissance, numéro de téléphone, 150 000 IBAN</p> <p class="feed-time"> Sun Nov 24 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#SFR-2024-11-24"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Banque de France </h3> <p>identité des employés, poste, salaire, identité des clients, comptes bancaires, historique, webmail, documents stratégiques, rapports financiers</p> <p class="feed-time"> Sat Nov 23 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Banque de France-2024-11-23"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Companie de Transport Strasbourgeoise </h3> <p>inconnu</p> <p class="feed-time"> Fri Nov 22 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Companie de Transport Strasbourgeoise-2024-11-22"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Chambres d’agriculture </h3> <p> </p> <p class="feed-time"> Thu Nov 21 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Chambres d’agriculture-2024-11-21"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Auchan </h3> <p>nom, prénom, adresse email, adresse postale, téléphone, composition familiale, date de naissance, numéro de carte de fidélité, montant de la cagnotte</p> <p class="feed-time"> Tue Nov 19 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Auchan-2024-11-19"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Mediboard </h3> <p>nom, prénom, date de naissance et de décès, genre, numéro de téléphone, médecin traitant, prescriptions médicales, identifiant externe, historique des soins</p> <p class="feed-time"> Tue Nov 19 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Mediboard-2024-11-19"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Direct Assurance </h3> <p>nom, adresse email, numéros de téléphone, IBAN</p> <p class="feed-time"> Tue Nov 19 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Direct Assurance-2024-11-19"> read more </a> </article> <hr> <article> <h3> Cybermalveillance.gouv.fr publie sa 3e étude sur la maturité cyber des collectivités et souligne une prise en compte des risques insuffisante – La frontière s’accentue entre les petites collectivités et celles de plus de 1 000 habitants – </h3> <p>À l’occasion de sa participation au Salon des Maires et des Collectivités locales, Cybermalveillance.gouv.fr publie sa troisième étude* sur la maturité des collectivités en matière de cybersécurité. Alors qu’elles restent des cibles majeures, et ce peu importe leur taille, le…</p> <p class="feed-time"> Mon, 18 Nov 2024 22:02:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/cp-etude-2024-cybersecurite-collectivites"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Le Point </h3> <p>nom, adresse email, numéro de téléphone, adresse postale, date de naissance</p> <p class="feed-time"> Mon Nov 18 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Le Point-2024-11-18"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Huttopia </h3> <p>nom, prénom, adresse email</p> <p class="feed-time"> Thu Nov 14 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Huttopia-2024-11-14"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Molotov </h3> <p>adresse email, nom, prénom, date de naissance</p> <p class="feed-time"> Wed Nov 13 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Molotov-2024-11-13"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Picard </h3> <p>nom, prénom, date de naissance, adresse email, adresse postale, numéro de téléphone, numéro de carte de fidélité, points de fidélité, bons de réduction, historique des commandes, tickets de caisse, liste d’achats, favoris d’achat</p> <p class="feed-time"> Tue Nov 12 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Picard-2024-11-12"> read more </a> </article> <hr> <article> <h3> Violation de données personnelles de lrsquo;opérateur Free : situation, risques et recommandations </h3> <p>L’opérateur de télécommunications Free a été victime d’une attaque informatique qui a conduit à l’exfiltration de données à caractère personnel de ses clients. Cette violation concerne notamment les données suivantes : nom, prénom, adresses email et postale, date et lieu de…</p> <p class="feed-time"> Thu, 31 Oct 2024 15:33:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/violation-de-donnees-personnelles-free-202410"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Free Mobile </h3> <p>nom, prénom, date de naissance, lieu de naissance, adresse email, adresse postale, identifiant abonné, type d’offre souscrite, date de souscription, abonnement actif ou non</p> <p class="feed-time"> Fri Oct 25 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Free Mobile-2024-10-25"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Free </h3> <p>nom, prénom, date de naissance, lieu de naissance, adresse email, adresse postale, IBAN, identifiant abonné, type d’offre souscrite, date de souscription, abonnement actif ou non</p> <p class="feed-time"> Fri Oct 25 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Free-2024-10-25"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Ornikar </h3> <p>nom, prénom, date de naissance, adresse email, adresse postale, numéro de téléphone</p> <p class="feed-time"> Thu Oct 24 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Ornikar-2024-10-24"> read more </a> </article> <hr> <article> <h3> Campagne nationale 2024 TV-médias de sensibilisation à la cybersécurité </h3> <p>Afin de sensibiliser les particuliers aux risques numériques, et dans le cadre du Cybermoi/s 2024, Cybermalveillance.gouv.fr renouvelle son partenariat avec l’Institut National de la Consommation (INC) pour réaliser une série d’émissions Consomag diffusées sur les chaînes du groupe…</p> <p class="feed-time"> Tue, 15 Oct 2024 15:06:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/campagne-nationale-2024-tv-medias"> read more </a> </article> <hr> <article> <h3> Cybersécurité : Numeum et le Campus Cyber lancent la plateforme Cyber4Tomorrow.fr et signent un partenariat avec Cybermalveillance.gouv.fr pour une cybersécurité durable et inclusive </h3> <p>À l’occasion des Assises de la Cybersécurité 2024, et en plein cœur du Cybermoi/s, Numeum et le Campus Cyber annoncent deux initiatives majeures : le lancement de la plateforme Cyber4Tomorrow.fr et la signature d’un partenariat avec Cybermalveillance.gouv.fr. L’ambition est commune :…</p> <p class="feed-time"> Tue, 15 Oct 2024 11:10:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/numeum-campus-cyber-cyber4tomorrowfr-cybermalveillancegouvfr"> read more </a> </article> <hr> <article> <h3> Culture presse, le SNDP et France Messagerie se mobilisent aux cotés de Cybermalveillance.gouv.fr à l’occasion du Cybermoi/s 2024 </h3> <p><p>Face au nouvel enjeu que représente la cybersécurité, les organisations professionnelles Culture presse, le SNDP et France Messagerie, déjà engagées dans différents défis sociétaux, ont décidé de se mobiliser aux côtés de Cybermalveillance.gouv.fr et du collectif Cybermoi/s. </p> </p> <p class="feed-time"> Mon, 07 Oct 2024 15:17:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/culture-presse-sndp-france-messagerie-cybermois-2024"> read more </a> </article> <hr> <article> <h3> Cybermoi/s 2024 : rejoignez le mouvement #CyberEngagés avec la campagne « Fausse Bonne Idée » </h3> <p><p>La cybersécurité est l’affaire de tous ! Dans le cadre du Cybermoi/s 2024, nous vous invitons à vous mobiliser et à prendre part à une action citoyenne d’ampleur nationale en relayant la campagne Fausse Bonne Idée.</p> </p> <p class="feed-time"> Tue, 01 Oct 2024 09:27:00 GMT </p> <a class="feed-link" href="https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/action-citoyenne-cyberengages"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Meilleurtaux </h3> <p>nom, prénom, date de naissance, pays de naissance, adresse postale, numéro de téléphone, situation professionnelle, situation familiale, revenus</p> <p class="feed-time"> Mon Sep 30 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Meilleurtaux-2024-09-30"> read more </a> </article> <hr> <article> <h3> Fuite de données chez RED by SFR </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone, IBAN, type de forfait, identifiant de la carte SIM, identifiant du smartphone</p> <p class="feed-time"> Wed Sep 18 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#RED by SFR-2024-09-18"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Assurance retraite </h3> <p>nom, prénom, adresse, numéro de Sécurité sociale, montant approximatif des ressources</p> <p class="feed-time"> Fri Sep 13 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Assurance retraite-2024-09-13"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cybertek </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone</p> <p class="feed-time"> Thu Sep 12 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cybertek-2024-09-12"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Cultura </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone, historique des commandes</p> <p class="feed-time"> Tue Sep 10 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Cultura-2024-09-10"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Boulanger </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone</p> <p class="feed-time"> Sat Sep 07 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Boulanger-2024-09-07"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Ticketmaster </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone, distorique des transactions, détails des commandes, informations bancaires (4 derniers numéros de la carte enregistrée et date d’expiration)</p> <p class="feed-time"> Sun Apr 28 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Ticketmaster-2024-04-28"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Le Slip Français </h3> <p>nom, prénom, téléphones, adresse postale, adresse email, numéros de commandes</p> <p class="feed-time"> Mon Apr 15 2024 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Le Slip Français-2024-04-15"> read more </a> </article> <hr> <article> <h3> Fuite de données chez France Travail </h3> <p>nom, prénom, numéro de sécurité sociale, adresse email, adresse postale, numéro de téléphone, identifiants France Travail</p> <p class="feed-time"> Fri Mar 08 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#France Travail-2024-03-08"> read more </a> </article> <hr> <article> <h3> Fuite de données chez LDLC </h3> <p>nom, prénom, adresse email, adresse postale, numéro de téléphone</p> <p class="feed-time"> Fri Mar 01 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#LDLC-2024-03-01"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Almerys, Viamedis </h3> <p>nom, prénom, date de naissance, numéro de sécurité sociale, nom de l’assureur de santé, contrat souscrit</p> <p class="feed-time"> Tue Feb 06 2024 01:00:00 GMT+0100 (heure normale d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Almerys, Viamedis-2024-02-06"> read more </a> </article> <hr> <article> <h3> Fuite de données chez Dailymotion </h3> <p>nom d'utilisateur, adresse email, Hachage des mots de passe</p> <p class="feed-time"> Sat Oct 01 2016 02:00:00 GMT+0200 (heure d’été d’Europe centrale) </p> <a class="feed-link" href="https://bonjourlafuite.eu.org/#Dailymotion-2016-10-01"> read more </a> </article> </div> </div> </main> <footer> </footer> </body> </html>